# Flog Txt Version 1
# Analyzer Version: 4.3.1
# Analyzer Build Date: Oct 25 2021 05:57:50
# Log Creation Date: 29.10.2021 14:55:53.741

Process:
	id = "1"
	image_name = "9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe"
	filename = "c:\\users\\rdhj0cnfevzx\\desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe"
	page_root = "0x46135000"
	os_pid = "0x11ec"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x664"
	cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe\" "
	cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd44" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 118
	        start_va = 0x10000
	          end_va = 0x2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 119
	        start_va = 0x30000
	          end_va = 0x31fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 120
	        start_va = 0x40000
	          end_va = 0x54fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 121
	        start_va = 0x60000
	          end_va = 0x9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 122
	        start_va = 0xa0000
	          end_va = 0x19ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 123
	        start_va = 0x1a0000
	          end_va = 0x1a3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 124
	        start_va = 0x1b0000
	          end_va = 0x1b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001b0000"
	        filename = ""

Region:
	              id = 125
	        start_va = 0x1c0000
	          end_va = 0x1c1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 126
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 127
	        start_va = 0x400000
	          end_va = 0xa97fff
	       monitored = 1
	     entry_point = 0xa077e4
	     region_type = mapped_file
	            name = "9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe"
	        filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe")

Region:
	              id = 128
	        start_va = 0x77260000
	          end_va = 0x773dafff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 129
	        start_va = 0x7ffb0000
	          end_va = 0x7ffd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007ffb0000"
	        filename = ""

Region:
	              id = 130
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 131
	        start_va = 0x7fff0000
	          end_va = 0x7ffc5f80ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 132
	        start_va = 0x7ffc5f810000
	          end_va = 0x7ffc5f9d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 133
	        start_va = 0x7ffc5f9d1000
	          end_va = 0x7ffffffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ffc5f9d1000"
	        filename = ""

Region:
	              id = 271
	        start_va = 0xc20000
	          end_va = 0xc2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c20000"
	        filename = ""

Region:
	              id = 272
	        start_va = 0x62ee0000
	          end_va = 0x62f2ffff
	       monitored = 0
	     entry_point = 0x62ef8180
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 273
	        start_va = 0x62f30000
	          end_va = 0x62fa9fff
	       monitored = 0
	     entry_point = 0x62f43290
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 274
	        start_va = 0x74530000
	          end_va = 0x7460ffff
	       monitored = 0
	     entry_point = 0x74543980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 275
	        start_va = 0x62fb0000
	          end_va = 0x62fb7fff
	       monitored = 0
	     entry_point = 0x62fb17c0
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 276
	        start_va = 0xc30000
	          end_va = 0xe5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c30000"
	        filename = ""

Region:
	              id = 277
	        start_va = 0x74530000
	          end_va = 0x7460ffff
	       monitored = 0
	     entry_point = 0x74543980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 278
	        start_va = 0x76c20000
	          end_va = 0x76d9dfff
	       monitored = 0
	     entry_point = 0x76cd1b90
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 279
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 280
	        start_va = 0x7feb0000
	          end_va = 0x7ffaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007feb0000"
	        filename = ""

Region:
	              id = 281
	        start_va = 0xaa0000
	          end_va = 0xb5dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 282
	        start_va = 0x73ee0000
	          end_va = 0x73f71fff
	       monitored = 0
	     entry_point = 0x73f20380
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll")

Region:
	              id = 283
	        start_va = 0x7fb00000
	          end_va = 0x7fea0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sysmain.sdb"
	        filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb")

Region:
	              id = 284
	        start_va = 0x20000
	          end_va = 0x23fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 285
	        start_va = 0x76300000
	          end_va = 0x76446fff
	       monitored = 0
	     entry_point = 0x76311cf0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 286
	        start_va = 0x76010000
	          end_va = 0x7615efff
	       monitored = 0
	     entry_point = 0x760c6820
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 287
	        start_va = 0xb60000
	          end_va = 0xb9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000b60000"
	        filename = ""

Region:
	              id = 288
	        start_va = 0xc30000
	          end_va = 0xd2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c30000"
	        filename = ""

Region:
	              id = 289
	        start_va = 0xd60000
	          end_va = 0xe5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d60000"
	        filename = ""

Region:
	              id = 290
	        start_va = 0x6cd50000
	          end_va = 0x6cd5efff
	       monitored = 0
	     entry_point = 0x6cd52a50
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\SysWOW64\\wtsapi32.dll" (normalized: "c:\\windows\\syswow64\\wtsapi32.dll")

Region:
	              id = 291
	        start_va = 0x74290000
	          end_va = 0x7434dfff
	       monitored = 0
	     entry_point = 0x742c5630
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 292
	        start_va = 0x1d0000
	          end_va = 0x1f9fff
	       monitored = 0
	     entry_point = 0x1d5680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 293
	        start_va = 0xe60000
	          end_va = 0xfe7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000e60000"
	        filename = ""

Region:
	              id = 294
	        start_va = 0x77150000
	          end_va = 0x7717afff
	       monitored = 0
	     entry_point = 0x77155680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 295
	        start_va = 0x30000
	          end_va = 0x30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 296
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 297
	        start_va = 0x1e0000
	          end_va = 0x1fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 298
	        start_va = 0xff0000
	          end_va = 0x1170fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ff0000"
	        filename = ""

Region:
	              id = 299
	        start_va = 0x1180000
	          end_va = 0x257ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001180000"
	        filename = ""

Region:
	              id = 300
	        start_va = 0x2580000
	          end_va = 0x26effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002580000"
	        filename = ""

Region:
	              id = 301
	        start_va = 0x1e0000
	          end_va = 0x1effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 302
	        start_va = 0x1f0000
	          end_va = 0x1fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 303
	        start_va = 0x2580000
	          end_va = 0x267ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002580000"
	        filename = ""

Region:
	              id = 304
	        start_va = 0x26e0000
	          end_va = 0x26effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000026e0000"
	        filename = ""

Region:
	              id = 305
	        start_va = 0xba0000
	          end_va = 0xbc1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ba0000"
	        filename = ""

Region:
	              id = 306
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 307
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 308
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 309
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 310
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 311
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 312
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 313
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 314
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 315
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 316
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 317
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 318
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 319
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 320
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 321
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 322
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 323
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 324
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 325
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 326
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 327
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 328
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 329
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 330
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 331
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 332
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 333
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 334
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 335
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 336
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 337
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 338
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 339
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 340
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 341
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 342
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 343
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 344
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 345
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 346
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 347
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 348
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 349
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 350
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 351
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 352
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 353
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 354
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 355
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 356
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 357
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 358
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 359
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 360
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 361
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 362
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 363
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 364
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 365
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 366
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 367
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 368
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 369
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 370
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 371
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 372
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 373
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 374
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 375
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 376
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 377
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 378
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 379
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 380
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 381
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 382
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 383
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 384
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 385
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 386
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 387
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 388
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 389
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 390
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 391
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 392
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 393
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 394
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 395
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 396
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 397
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 398
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 399
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 400
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 401
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 402
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 403
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 404
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 405
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 406
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 407
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 408
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 409
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 410
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 411
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 412
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 413
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 414
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 415
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 416
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 417
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 418
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 419
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 420
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 421
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 422
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 423
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 424
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 425
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 426
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 427
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 428
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 429
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 430
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 431
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 432
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 433
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 434
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 435
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 436
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 437
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 438
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 439
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 440
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 441
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 442
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 443
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 444
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 445
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 446
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 447
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 448
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 449
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 450
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 451
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 452
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 453
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 454
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 455
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 456
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 457
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 458
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 459
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 460
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 461
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 462
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 463
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 464
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 465
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 466
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 467
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 468
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 469
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 470
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 471
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 472
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 473
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 474
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 475
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 476
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 477
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 478
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 479
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 480
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 481
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 482
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 483
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 484
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 485
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 486
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 487
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 488
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 489
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 490
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 491
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 492
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 493
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 494
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 495
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 496
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 497
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 498
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 499
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 500
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 501
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 502
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 503
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 504
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 505
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 506
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 507
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 508
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 509
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 510
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 511
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 512
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 513
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 514
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 515
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 516
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 517
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 518
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 519
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 520
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 521
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 522
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 523
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 524
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 525
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 526
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 527
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 528
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 529
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 530
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 531
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 532
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 533
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 534
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 535
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 536
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 537
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 538
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 539
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 540
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 541
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 542
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 543
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 544
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 545
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 546
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 547
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 548
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 549
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 550
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 551
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 552
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 553
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 554
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 555
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 556
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 557
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 558
	        start_va = 0xba0000
	          end_va = 0xba0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ba0000"
	        filename = ""

Region:
	              id = 559
	        start_va = 0xbb0000
	          end_va = 0xbb0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000bb0000"
	        filename = ""

Region:
	              id = 560
	        start_va = 0xbc0000
	          end_va = 0xbc3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000bc0000"
	        filename = ""

Region:
	              id = 561
	        start_va = 0xbd0000
	          end_va = 0xbd0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000bd0000"
	        filename = ""

Region:
	              id = 562
	        start_va = 0xbe0000
	          end_va = 0xbe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000be0000"
	        filename = ""

Region:
	              id = 563
	        start_va = 0xbf0000
	          end_va = 0xbf0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000bf0000"
	        filename = ""

Region:
	              id = 564
	        start_va = 0xc00000
	          end_va = 0xc0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c00000"
	        filename = ""

Region:
	              id = 565
	        start_va = 0xd30000
	          end_va = 0xd51fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d30000"
	        filename = ""

Region:
	              id = 566
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 567
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 568
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 569
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 570
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 571
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 572
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 573
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 574
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 575
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 576
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 577
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 578
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 579
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 580
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 581
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 582
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 583
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 584
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 585
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 586
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 587
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 588
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 589
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 590
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 591
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 592
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 593
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 594
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 595
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 596
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 597
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 598
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 599
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 600
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 601
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 602
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 603
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 604
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 605
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 606
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 607
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 608
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 609
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 610
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 611
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 612
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 613
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 614
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 615
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 616
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 617
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 618
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 619
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 620
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 621
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 622
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 623
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 624
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 625
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 626
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 627
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 628
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 629
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 630
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 631
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 632
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 633
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 634
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 635
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 636
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 637
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 638
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 639
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 640
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 641
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 642
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 643
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 644
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 645
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 646
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 647
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 648
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 649
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 650
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 651
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 652
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 653
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 654
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 655
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 656
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 657
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 658
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 659
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 660
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 661
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 662
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 663
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 664
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 665
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 666
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 667
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 668
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 669
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 670
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 671
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 672
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 673
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 674
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 675
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 676
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 677
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 678
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 679
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 680
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 681
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 682
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 683
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 684
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 685
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 686
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 687
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 688
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 689
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 690
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 691
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 692
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 693
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 694
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 695
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 696
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 697
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 698
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 699
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 700
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 701
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 702
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 703
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 704
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 705
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 706
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 707
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 708
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 709
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 710
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 711
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 712
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 713
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 714
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 715
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 716
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 717
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 718
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 719
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 720
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 721
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 722
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 723
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 724
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 725
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 726
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 727
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 728
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 729
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 730
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 731
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 732
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 733
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 734
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 735
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 736
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 737
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 738
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 739
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 740
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 741
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 742
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 743
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 744
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 745
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 746
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 747
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 748
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 749
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 750
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 751
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 752
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 753
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 754
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 755
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 756
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 757
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 758
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 759
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 760
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 761
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 762
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 763
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 764
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 765
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 766
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 767
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 768
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 769
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 770
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 771
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 772
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 773
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 774
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 775
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 776
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 777
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 778
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 779
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 780
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 781
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 782
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 783
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 784
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 785
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 786
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 787
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 788
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 789
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 790
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 791
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 792
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 793
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 794
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 795
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 796
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 797
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 798
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 799
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 800
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 801
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 802
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 803
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 804
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 805
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 806
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 807
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 808
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 809
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 810
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 811
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 812
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 813
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 814
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 815
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 816
	        start_va = 0xc00000
	          end_va = 0xc06fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c00000"
	        filename = ""

Region:
	              id = 817
	        start_va = 0x26f0000
	          end_va = 0x27effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000026f0000"
	        filename = ""

Region:
	              id = 834
	        start_va = 0xc00000
	          end_va = 0xc1dfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c00000"
	        filename = ""


Thread:
	id = 1
	os_tid = 0x1230

	[0069.835] LocalAlloc (uFlags=0x0, uBytes=0xb0) returned 0xd6f250
	[0069.839] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74530000
	[0069.840] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77260000
	[0069.864] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19ff14 | out: Wow64Process=0x19ff14*=1) returned 1
	[0070.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fab8*=0x436000, NumberOfBytesToProtect=0x19fab0, NewAccessProtection=0x40, OldAccessProtection=0x19fde0 | out: BaseAddress=0x19fab8*=0x436000, NumberOfBytesToProtect=0x19fab0, OldAccessProtection=0x19fde0*=0x20) returned 0x0
	[0070.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fab8*=0x423000, NumberOfBytesToProtect=0x19fab0, NewAccessProtection=0x40, OldAccessProtection=0x19fde0 | out: BaseAddress=0x19fab8*=0x423000, NumberOfBytesToProtect=0x19fab0, OldAccessProtection=0x19fde0*=0x20) returned 0x0
	[0070.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fab8*=0x45b000, NumberOfBytesToProtect=0x19fab0, NewAccessProtection=0x4, OldAccessProtection=0x19fde0 | out: BaseAddress=0x19fab8*=0x45b000, NumberOfBytesToProtect=0x19fab0, OldAccessProtection=0x19fde0*=0x80) returned 0x0
	[0070.387] LocalAlloc (uFlags=0x0, uBytes=0x3e6c) returned 0xd735f0
	[0071.290] LocalFree (hMem=0xd735f0) returned 0x0
	[0071.290] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x74530000
	[0071.291] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.291] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.291] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.291] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.291] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.291] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.292] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.293] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.293] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.294] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x76300000
	[0071.294] GetModuleHandleA (lpModuleName="WTSAPI32.dll") returned 0x6cd50000
	[0071.294] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x74530000
	[0071.296] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.296] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.296] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.296] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.301] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.317] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.317] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000
	[0071.318] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x76300000
	[0071.319] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x19fea4, lpSystemAffinityMask=0x19fedc | out: lpProcessAffinityMask=0x19fea4, lpSystemAffinityMask=0x19fedc) returned 1
	[0071.319] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1
	[0071.319] Sleep (dwMilliseconds=0x0) 
	[0071.330] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1
	[0071.331] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x2) returned 0x0
	[0071.333] Sleep (dwMilliseconds=0x0) 
	[0071.348] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0
	[0071.348] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x4) returned 0x0
	[0071.349] Sleep (dwMilliseconds=0x0) 
	[0071.356] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0
	[0071.356] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x8) returned 0x0
	[0071.357] Sleep (dwMilliseconds=0x0) 
	[0071.375] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0
	[0071.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19f9c0 | out: lpSystemTimeAsFileTime=0x19f9c0*(dwLowDateTime=0x3c083735, dwHighDateTime=0x1d7ccd5)) 
	[0071.376] GetCurrentProcessId () returned 0x11ec
	[0071.376] GetCurrentThreadId () returned 0x1230
	[0071.376] GetTickCount () returned 0x11847c5
	[0071.377] QueryPerformanceCounter (in: lpPerformanceCount=0x19f9b8 | out: lpPerformanceCount=0x19f9b8*=1846905870217) returned 1
	[0071.377] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x26e0000
	[0071.378] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.378] GetProcAddress (hModule=0x74530000, lpProcName="FlsAlloc") returned 0x7454a980
	[0071.378] GetProcAddress (hModule=0x74530000, lpProcName="FlsGetValue") returned 0x74547570
	[0071.378] GetProcAddress (hModule=0x74530000, lpProcName="FlsSetValue") returned 0x74549e30
	[0071.379] GetProcAddress (hModule=0x74530000, lpProcName="FlsFree") returned 0x74554ff0
	[0071.379] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.379] GetProcAddress (hModule=0x74530000, lpProcName="EncodePointer") returned 0x772bf730
	[0071.379] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.379] GetProcAddress (hModule=0x74530000, lpProcName="EncodePointer") returned 0x772bf730
	[0071.379] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.379] GetProcAddress (hModule=0x74530000, lpProcName="EncodePointer") returned 0x772bf730
	[0071.379] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.380] GetProcAddress (hModule=0x74530000, lpProcName="EncodePointer") returned 0x772bf730
	[0071.380] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.380] GetProcAddress (hModule=0x74530000, lpProcName="EncodePointer") returned 0x772bf730
	[0071.380] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.380] GetProcAddress (hModule=0x74530000, lpProcName="EncodePointer") returned 0x772bf730
	[0071.380] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.380] GetProcAddress (hModule=0x74530000, lpProcName="EncodePointer") returned 0x772bf730
	[0071.381] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.381] GetProcAddress (hModule=0x74530000, lpProcName="DecodePointer") returned 0x772bd830
	[0071.381] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x214) returned 0x26e05a8
	[0071.381] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.381] GetProcAddress (hModule=0x74530000, lpProcName="DecodePointer") returned 0x772bd830
	[0071.381] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74530000
	[0071.382] GetProcAddress (hModule=0x74530000, lpProcName="EncodePointer") returned 0x772bf730
	[0071.382] GetProcAddress (hModule=0x74530000, lpProcName="DecodePointer") returned 0x772bd830
	[0071.382] GetCurrentThreadId () returned 0x1230
	[0071.382] GetCommandLineA () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe\" "
	[0071.382] GetEnvironmentStringsW () returned 0xd71af8*
	[0071.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1293
	[0071.382] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x50d) returned 0x26e07c8
	[0071.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0x26e07c8, cbMultiByte=1293, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1293
	[0071.383] FreeEnvironmentStringsW (penv=0xd71af8) returned 1
	[0071.383] GetStartupInfoA (in: lpStartupInfo=0x19f910 | out: lpStartupInfo=0x19f910*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0071.383] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x800) returned 0x26e0ce0
	[0071.383] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0071.383] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0071.383] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0071.383] SetHandleCount (uNumber=0x20) returned 0x20
	[0071.383] GetLastError () returned 0x0
	[0071.383] SetLastError (dwErrCode=0x0) 
	[0071.383] GetLastError () returned 0x0
	[0071.383] SetLastError (dwErrCode=0x0) 
	[0071.383] GetLastError () returned 0x0
	[0071.383] SetLastError (dwErrCode=0x0) 
	[0071.384] GetACP () returned 0x4e4
	[0071.384] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x220) returned 0x26e14e8
	[0071.384] GetLastError () returned 0x0
	[0071.384] SetLastError (dwErrCode=0x0) 
	[0071.384] IsValidCodePage (CodePage=0x4e4) returned 1
	[0071.384] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f8f0 | out: lpCPInfo=0x19f8f0) returned 1
	[0071.384] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f3bc | out: lpCPInfo=0x19f3bc) returned 1
	[0071.384] GetLastError () returned 0x0
	[0071.384] SetLastError (dwErrCode=0x0) 
	[0071.384] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x19f34c | out: lpCharType=0x19f34c) returned 1
	[0071.384] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f7d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0071.384] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f7d0, cbMultiByte=256, lpWideCharStr=0x19f138, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\ᇞ䔏) returned 256
	[0071.384] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\ᇞ䔏, cchSrc=256, lpCharType=0x19f3d0 | out: lpCharType=0x19f3d0) returned 1
	[0071.384] GetLastError () returned 0x0
	[0071.384] SetLastError (dwErrCode=0x0) 
	[0071.384] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1
	[0071.384] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f7d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0071.384] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f7d0, cbMultiByte=256, lpWideCharStr=0x19f108, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿힺDĀ") returned 256
	[0071.385] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿힺDĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0071.385] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿힺDĀ", cchSrc=256, lpDestStr=0x19eef8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0071.385] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x19f6d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\nQõ8\x08ù\x19", lpUsedDefaultChar=0x0) returned 256
	[0071.385] GetLastError () returned 0x0
	[0071.385] SetLastError (dwErrCode=0x0) 
	[0071.385] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f7d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0071.385] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f7d0, cbMultiByte=256, lpWideCharStr=0x19f128, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿힺDĀ") returned 256
	[0071.385] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿힺDĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0071.385] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿힺDĀ", cchSrc=256, lpDestStr=0x19ef18, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256
	[0071.385] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x19f5d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\nQõ8\x08ù\x19", lpUsedDefaultChar=0x0) returned 256
	[0071.385] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x45e528, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe")) returned 0x62
	[0071.385] GetLastError () returned 0x0
	[0071.385] SetLastError (dwErrCode=0x0) 
	[0071.385] GetLastError () returned 0x0
	[0071.386] SetLastError (dwErrCode=0x0) 
	[0071.386] GetLastError () returned 0x0
	[0071.386] SetLastError (dwErrCode=0x0) 
	[0071.386] GetLastError () returned 0x0
	[0071.386] SetLastError (dwErrCode=0x0) 
	[0071.386] GetLastError () returned 0x0
	[0071.386] SetLastError (dwErrCode=0x0) 
	[0071.386] GetLastError () returned 0x0
	[0071.386] SetLastError (dwErrCode=0x0) 
	[0071.386] GetLastError () returned 0x0
	[0071.386] SetLastError (dwErrCode=0x0) 
	[0071.386] GetLastError () returned 0x0
	[0071.386] SetLastError (dwErrCode=0x0) 
	[0071.386] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.387] SetLastError (dwErrCode=0x0) 
	[0071.387] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.388] SetLastError (dwErrCode=0x0) 
	[0071.388] GetLastError () returned 0x0
	[0071.389] SetLastError (dwErrCode=0x0) 
	[0071.389] GetLastError () returned 0x0
	[0071.389] SetLastError (dwErrCode=0x0) 
	[0071.389] GetLastError () returned 0x0
	[0071.389] SetLastError (dwErrCode=0x0) 
	[0071.389] GetLastError () returned 0x0
	[0071.389] SetLastError (dwErrCode=0x0) 
	[0071.389] GetLastError () returned 0x0
	[0071.389] SetLastError (dwErrCode=0x0) 
	[0071.389] GetLastError () returned 0x0
	[0071.389] SetLastError (dwErrCode=0x0) 
	[0071.389] GetLastError () returned 0x0
	[0071.389] SetLastError (dwErrCode=0x0) 
	[0071.389] GetLastError () returned 0x0
	[0071.389] SetLastError (dwErrCode=0x0) 
	[0071.389] GetLastError () returned 0x0
	[0071.389] SetLastError (dwErrCode=0x0) 
	[0071.389] GetLastError () returned 0x0
	[0071.390] SetLastError (dwErrCode=0x0) 
	[0071.390] GetLastError () returned 0x0
	[0071.390] SetLastError (dwErrCode=0x0) 
	[0071.390] GetLastError () returned 0x0
	[0071.390] SetLastError (dwErrCode=0x0) 
	[0071.390] GetLastError () returned 0x0
	[0071.390] SetLastError (dwErrCode=0x0) 
	[0071.390] GetLastError () returned 0x0
	[0071.390] SetLastError (dwErrCode=0x0) 
	[0071.390] GetLastError () returned 0x0
	[0071.390] SetLastError (dwErrCode=0x0) 
	[0071.390] GetLastError () returned 0x0
	[0071.390] SetLastError (dwErrCode=0x0) 
	[0071.390] GetLastError () returned 0x0
	[0071.390] SetLastError (dwErrCode=0x0) 
	[0071.390] GetLastError () returned 0x0
	[0071.390] SetLastError (dwErrCode=0x0) 
	[0071.390] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.391] SetLastError (dwErrCode=0x0) 
	[0071.391] GetLastError () returned 0x0
	[0071.392] SetLastError (dwErrCode=0x0) 
	[0071.392] GetLastError () returned 0x0
	[0071.392] SetLastError (dwErrCode=0x0) 
	[0071.392] GetLastError () returned 0x0
	[0071.392] SetLastError (dwErrCode=0x0) 
	[0071.392] GetLastError () returned 0x0
	[0071.392] SetLastError (dwErrCode=0x0) 
	[0071.392] GetLastError () returned 0x0
	[0071.392] SetLastError (dwErrCode=0x0) 
	[0071.392] GetLastError () returned 0x0
	[0071.392] SetLastError (dwErrCode=0x0) 
	[0071.392] GetLastError () returned 0x0
	[0071.392] SetLastError (dwErrCode=0x0) 
	[0071.392] GetLastError () returned 0x0
	[0071.392] SetLastError (dwErrCode=0x0) 
	[0071.392] GetLastError () returned 0x0
	[0071.392] SetLastError (dwErrCode=0x0) 
	[0071.392] GetLastError () returned 0x0
	[0071.393] SetLastError (dwErrCode=0x0) 
	[0071.393] GetLastError () returned 0x0
	[0071.393] SetLastError (dwErrCode=0x0) 
	[0071.393] GetLastError () returned 0x0
	[0071.393] SetLastError (dwErrCode=0x0) 
	[0071.393] GetLastError () returned 0x0
	[0071.393] SetLastError (dwErrCode=0x0) 
	[0071.393] GetLastError () returned 0x0
	[0071.393] SetLastError (dwErrCode=0x0) 
	[0071.393] GetLastError () returned 0x0
	[0071.393] SetLastError (dwErrCode=0x0) 
	[0071.393] GetLastError () returned 0x0
	[0071.393] SetLastError (dwErrCode=0x0) 
	[0071.393] GetLastError () returned 0x0
	[0071.394] SetLastError (dwErrCode=0x0) 
	[0071.394] GetLastError () returned 0x0
	[0071.394] SetLastError (dwErrCode=0x0) 
	[0071.394] GetLastError () returned 0x0
	[0071.394] SetLastError (dwErrCode=0x0) 
	[0071.394] GetLastError () returned 0x0
	[0071.394] SetLastError (dwErrCode=0x0) 
	[0071.394] GetLastError () returned 0x0
	[0071.394] SetLastError (dwErrCode=0x0) 
	[0071.394] GetLastError () returned 0x0
	[0071.394] SetLastError (dwErrCode=0x0) 
	[0071.394] GetLastError () returned 0x0
	[0071.394] SetLastError (dwErrCode=0x0) 
	[0071.394] GetLastError () returned 0x0
	[0071.394] SetLastError (dwErrCode=0x0) 
	[0071.395] GetLastError () returned 0x0
	[0071.395] SetLastError (dwErrCode=0x0) 
	[0071.395] GetLastError () returned 0x0
	[0071.395] SetLastError (dwErrCode=0x0) 
	[0071.395] GetLastError () returned 0x0
	[0071.395] SetLastError (dwErrCode=0x0) 
	[0071.395] GetLastError () returned 0x0
	[0071.395] SetLastError (dwErrCode=0x0) 
	[0071.395] GetLastError () returned 0x0
	[0071.395] SetLastError (dwErrCode=0x0) 
	[0071.395] GetLastError () returned 0x0
	[0071.395] SetLastError (dwErrCode=0x0) 
	[0071.395] GetLastError () returned 0x0
	[0071.395] SetLastError (dwErrCode=0x0) 
	[0071.395] GetLastError () returned 0x0
	[0071.396] SetLastError (dwErrCode=0x0) 
	[0071.396] GetLastError () returned 0x0
	[0071.396] SetLastError (dwErrCode=0x0) 
	[0071.396] GetLastError () returned 0x0
	[0071.396] SetLastError (dwErrCode=0x0) 
	[0071.396] GetLastError () returned 0x0
	[0071.396] SetLastError (dwErrCode=0x0) 
	[0071.396] GetLastError () returned 0x0
	[0071.396] SetLastError (dwErrCode=0x0) 
	[0071.396] GetLastError () returned 0x0
	[0071.396] SetLastError (dwErrCode=0x0) 
	[0071.396] GetLastError () returned 0x0
	[0071.396] SetLastError (dwErrCode=0x0) 
	[0071.396] GetLastError () returned 0x0
	[0071.396] SetLastError (dwErrCode=0x0) 
	[0071.396] GetLastError () returned 0x0
	[0071.397] SetLastError (dwErrCode=0x0) 
	[0071.397] GetLastError () returned 0x0
	[0071.397] SetLastError (dwErrCode=0x0) 
	[0071.397] GetLastError () returned 0x0
	[0071.397] SetLastError (dwErrCode=0x0) 
	[0071.397] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x6b) returned 0x26e1710
	[0071.397] GetLastError () returned 0x0
	[0071.397] SetLastError (dwErrCode=0x0) 
	[0071.397] GetLastError () returned 0x0
	[0071.397] SetLastError (dwErrCode=0x0) 
	[0071.397] GetLastError () returned 0x0
	[0071.397] SetLastError (dwErrCode=0x0) 
	[0071.397] GetLastError () returned 0x0
	[0071.397] SetLastError (dwErrCode=0x0) 
	[0071.397] GetLastError () returned 0x0
	[0071.397] SetLastError (dwErrCode=0x0) 
	[0071.397] GetLastError () returned 0x0
	[0071.398] SetLastError (dwErrCode=0x0) 
	[0071.398] GetLastError () returned 0x0
	[0071.398] SetLastError (dwErrCode=0x0) 
	[0071.398] GetLastError () returned 0x0
	[0071.398] SetLastError (dwErrCode=0x0) 
	[0071.398] GetLastError () returned 0x0
	[0071.398] SetLastError (dwErrCode=0x0) 
	[0071.398] GetLastError () returned 0x0
	[0071.398] SetLastError (dwErrCode=0x0) 
	[0071.398] GetLastError () returned 0x0
	[0071.398] SetLastError (dwErrCode=0x0) 
	[0071.398] GetLastError () returned 0x0
	[0071.398] SetLastError (dwErrCode=0x0) 
	[0071.398] GetLastError () returned 0x0
	[0071.398] SetLastError (dwErrCode=0x0) 
	[0071.398] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.399] SetLastError (dwErrCode=0x0) 
	[0071.399] GetLastError () returned 0x0
	[0071.400] SetLastError (dwErrCode=0x0) 
	[0071.400] GetLastError () returned 0x0
	[0071.400] SetLastError (dwErrCode=0x0) 
	[0071.400] GetLastError () returned 0x0
	[0071.400] SetLastError (dwErrCode=0x0) 
	[0071.400] GetLastError () returned 0x0
	[0071.400] SetLastError (dwErrCode=0x0) 
	[0071.400] GetLastError () returned 0x0
	[0071.400] SetLastError (dwErrCode=0x0) 
	[0071.400] GetLastError () returned 0x0
	[0071.400] SetLastError (dwErrCode=0x0) 
	[0071.400] GetLastError () returned 0x0
	[0071.400] SetLastError (dwErrCode=0x0) 
	[0071.400] GetLastError () returned 0x0
	[0071.400] SetLastError (dwErrCode=0x0) 
	[0071.400] GetLastError () returned 0x0
	[0071.400] SetLastError (dwErrCode=0x0) 
	[0071.400] GetLastError () returned 0x0
	[0071.401] SetLastError (dwErrCode=0x0) 
	[0071.401] GetLastError () returned 0x0
	[0071.401] SetLastError (dwErrCode=0x0) 
	[0071.401] GetLastError () returned 0x0
	[0071.401] SetLastError (dwErrCode=0x0) 
	[0071.401] GetLastError () returned 0x0
	[0071.402] SetLastError (dwErrCode=0x0) 
	[0071.402] GetLastError () returned 0x0
	[0071.402] SetLastError (dwErrCode=0x0) 
	[0071.402] GetLastError () returned 0x0
	[0071.402] SetLastError (dwErrCode=0x0) 
	[0071.402] GetLastError () returned 0x0
	[0071.402] SetLastError (dwErrCode=0x0) 
	[0071.402] GetLastError () returned 0x0
	[0071.402] SetLastError (dwErrCode=0x0) 
	[0071.402] GetLastError () returned 0x0
	[0071.402] SetLastError (dwErrCode=0x0) 
	[0071.402] GetLastError () returned 0x0
	[0071.402] SetLastError (dwErrCode=0x0) 
	[0071.402] GetLastError () returned 0x0
	[0071.402] SetLastError (dwErrCode=0x0) 
	[0071.402] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.403] SetLastError (dwErrCode=0x0) 
	[0071.403] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.404] SetLastError (dwErrCode=0x0) 
	[0071.404] GetLastError () returned 0x0
	[0071.405] SetLastError (dwErrCode=0x0) 
	[0071.405] GetLastError () returned 0x0
	[0071.405] SetLastError (dwErrCode=0x0) 
	[0071.405] GetLastError () returned 0x0
	[0071.405] SetLastError (dwErrCode=0x0) 
	[0071.405] GetLastError () returned 0x0
	[0071.405] SetLastError (dwErrCode=0x0) 
	[0071.405] GetLastError () returned 0x0
	[0071.405] SetLastError (dwErrCode=0x0) 
	[0071.405] GetLastError () returned 0x0
	[0071.405] SetLastError (dwErrCode=0x0) 
	[0071.405] GetLastError () returned 0x0
	[0071.405] SetLastError (dwErrCode=0x0) 
	[0071.405] GetLastError () returned 0x0
	[0071.405] SetLastError (dwErrCode=0x0) 
	[0071.405] GetLastError () returned 0x0
	[0071.405] SetLastError (dwErrCode=0x0) 
	[0071.408] GetLastError () returned 0x0
	[0071.408] SetLastError (dwErrCode=0x0) 
	[0071.408] GetLastError () returned 0x0
	[0071.408] SetLastError (dwErrCode=0x0) 
	[0071.408] GetLastError () returned 0x0
	[0071.408] SetLastError (dwErrCode=0x0) 
	[0071.408] GetLastError () returned 0x0
	[0071.408] SetLastError (dwErrCode=0x0) 
	[0071.408] GetLastError () returned 0x0
	[0071.408] SetLastError (dwErrCode=0x0) 
	[0071.408] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.409] SetLastError (dwErrCode=0x0) 
	[0071.409] GetLastError () returned 0x0
	[0071.410] SetLastError (dwErrCode=0x0) 
	[0071.410] GetLastError () returned 0x0
	[0071.410] SetLastError (dwErrCode=0x0) 
	[0071.410] GetLastError () returned 0x0
	[0071.410] SetLastError (dwErrCode=0x0) 
	[0071.410] GetLastError () returned 0x0
	[0071.410] SetLastError (dwErrCode=0x0) 
	[0071.410] GetLastError () returned 0x0
	[0071.410] SetLastError (dwErrCode=0x0) 
	[0071.410] GetLastError () returned 0x0
	[0071.410] SetLastError (dwErrCode=0x0) 
	[0071.410] GetLastError () returned 0x0
	[0071.410] SetLastError (dwErrCode=0x0) 
	[0071.410] GetLastError () returned 0x0
	[0071.410] SetLastError (dwErrCode=0x0) 
	[0071.410] GetLastError () returned 0x0
	[0071.410] SetLastError (dwErrCode=0x0) 
	[0071.410] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x90) returned 0x26e1788
	[0071.410] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x1f) returned 0x26e1820
	[0071.410] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x2e) returned 0x26e1848
	[0071.410] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x37) returned 0x26e1880
	[0071.410] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x3c) returned 0x26e18c0
	[0071.410] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x31) returned 0x26e1908
	[0071.410] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x14) returned 0x26e1948
	[0071.410] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x24) returned 0x26e1968
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0xd) returned 0x26e1998
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x1d) returned 0x26e19b0
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x31) returned 0x26e19d8
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x15) returned 0x26e1a18
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x17) returned 0x26e1a38
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0xe) returned 0x26e1a58
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x69) returned 0x26e1a70
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x3e) returned 0x26e1ae8
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x1b) returned 0x26e1b30
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x1d) returned 0x26e1b58
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x48) returned 0x26e1b80
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x12) returned 0x26e1bd0
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x18) returned 0x26e1bf0
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x1b) returned 0x26e1c10
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x24) returned 0x26e1c38
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x29) returned 0x26e1c68
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x1e) returned 0x26e1ca0
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x6b) returned 0x26e1cc8
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x17) returned 0x26e1d40
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0xf) returned 0x26e1d60
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x16) returned 0x26e1d78
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x2a) returned 0x26e1d98
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x29) returned 0x26e1dd0
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x12) returned 0x26e1e08
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x21) returned 0x26e1e28
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x16) returned 0x26e1e58
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x22) returned 0x26e1e78
	[0071.411] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x12) returned 0x26e1ea8
	[0071.411] HeapFree (in: hHeap=0x26e0000, dwFlags=0x0, lpMem=0x26e07c8 | out: hHeap=0x26e0000) returned 1
	[0071.412] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x80) returned 0x26e1ec8
	[0071.412] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x8, Size=0x800) returned 0x26e1f50
	[0071.413] RtlSizeHeap (HeapHandle=0x26e0000, Flags=0x0, MemoryPointer=0x26e1ec8) returned 0x80
	[0071.422] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x50) returned 0x26e07c8
	[0071.422] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x2c) returned 0x26e0820
	[0071.423] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x108) returned 0x26e0858
	[0071.423] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x1c) returned 0x26e0968
	[0071.423] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x50) returned 0x26e0990
	[0071.423] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e09e8
	[0071.424] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xd) returned 0x26e0a00
	[0071.424] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74530000
	[0071.424] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e0a18
	[0071.424] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x14) returned 0x26e0a30
	[0071.426] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0xac
	[0071.444] Thread32First (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.444] GetCurrentProcessId () returned 0x11ec
	[0071.445] GetCurrentThreadId () returned 0x1230
	[0071.445] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.445] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.446] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.447] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.448] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.449] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.451] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.452] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.453] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.453] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.454] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.455] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.456] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.456] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.457] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.458] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.458] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.459] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.460] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.462] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.463] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.488] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.489] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.490] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.491] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.491] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.492] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.496] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.496] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.497] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.498] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.499] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.500] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.501] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.501] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.502] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.502] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.503] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.503] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.504] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.505] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.505] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.506] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.506] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.507] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.508] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.509] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.509] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.510] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.511] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.511] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.512] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.513] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.513] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.514] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.515] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.516] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.516] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.517] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.518] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.519] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.520] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.528] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.529] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.530] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.530] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.531] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.532] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.532] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.537] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.538] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.539] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.539] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.540] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.541] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.541] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.542] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.543] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.543] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.544] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.544] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.545] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.546] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.547] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.547] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.548] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.549] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.549] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.550] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.551] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.551] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.553] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.554] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.555] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.555] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.556] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.556] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.557] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.558] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.558] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.559] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.559] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.560] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.561] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.562] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.562] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.563] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.564] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.564] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.565] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.566] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.566] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.568] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.569] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.569] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.570] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.571] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.572] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.573] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.574] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.578] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.578] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.580] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.581] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.582] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.583] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.584] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.586] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.586] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.587] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.588] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.589] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.590] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.591] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.592] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.592] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.593] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.594] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.595] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.596] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.597] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.597] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.598] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.599] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.600] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.601] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.602] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.603] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.604] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.604] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.605] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.606] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.607] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.608] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.608] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.609] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.610] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.610] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.611] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.612] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.613] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.614] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.615] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.615] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.621] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.622] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.623] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.623] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.624] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.625] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.625] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.626] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.627] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.628] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.628] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.629] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.630] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.631] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.631] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.632] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.633] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.634] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.635] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.635] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.637] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.637] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.638] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.639] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.640] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.641] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.642] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.643] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.644] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.645] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.646] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.647] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.647] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.648] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.649] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.650] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.650] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.651] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.653] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.654] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.655] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.655] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.662] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.663] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.664] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.665] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.665] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.666] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.667] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.668] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.669] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.669] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.671] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.672] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.673] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.674] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.676] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.677] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.678] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.679] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.680] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.680] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.681] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.681] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.682] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.683] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.683] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.684] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.685] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.685] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.686] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.687] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.688] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.688] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.689] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.690] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.691] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.691] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.692] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.693] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.694] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.695] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.696] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.696] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0071.697] Thread32Next (hSnapshot=0xac, lpte=0x19f814) returned 1
	[0072.231] OpenThread (dwDesiredAccess=0x2, bInheritHandle=0, dwThreadId=0x1244) returned 0xb0
	[0072.231] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x4) returned 0x26e0a50
	[0072.232] CloseHandle (hObject=0xac) returned 1
	[0072.232] SuspendThread (hThread=0xb0) returned 0x0
	[0072.233] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e0a60
	[0072.233] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xa) returned 0x26e0a78
	[0072.234] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77260000
	[0072.247] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e0a90
	[0072.247] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x12) returned 0x26e0aa8
	[0072.250] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x10) returned 0x26e0ac8
	[0072.250] GetSystemInfo (in: lpSystemInfo=0x19f318 | out: lpSystemInfo=0x19f318*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) 
	[0072.250] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x1e0000
	[0072.251] GetCurrentProcess () returned 0xffffffff
	[0072.251] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1e0005, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.253] GetCurrentProcess () returned 0xffffffff
	[0072.253] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1e000f, lpBuffer=0x19f300*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f300*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.254] GetCurrentProcess () returned 0xffffffff
	[0072.254] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x7729c880, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.258] VirtualProtect (in: lpAddress=0x1e0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19f33c | out: lpflOldProtect=0x19f33c*=0x40) returned 1
	[0072.261] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x4) returned 0x26e0ae0
	[0072.262] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e0af0
	[0072.262] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x12) returned 0x26e0b08
	[0072.267] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x10) returned 0x26e0b28
	[0072.267] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xba0000
	[0072.267] GetCurrentProcess () returned 0xffffffff
	[0072.267] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xba0008, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.269] GetCurrentProcess () returned 0xffffffff
	[0072.269] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xba0015, lpBuffer=0x19f300*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f300*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.270] GetCurrentProcess () returned 0xffffffff
	[0072.270] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x772ebd60, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.271] VirtualProtect (in: lpAddress=0xba0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19f33c | out: lpflOldProtect=0x19f33c*=0x40) returned 1
	[0072.272] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x8) returned 0x26e0b40
	[0072.272] HeapFree (in: hHeap=0x26e0000, dwFlags=0x0, lpMem=0x26e0ae0 | out: hHeap=0x26e0000) returned 1
	[0072.272] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e0b50
	[0072.272] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xb) returned 0x26e0b68
	[0072.273] GetModuleHandleA (lpModuleName="user32.dll") returned 0x76300000
	[0072.273] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e0b80
	[0072.273] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e0b98
	[0072.275] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x10) returned 0x26e0bb0
	[0072.275] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xbb0000
	[0072.275] GetCurrentProcess () returned 0xffffffff
	[0072.275] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xbb0005, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.277] GetCurrentProcess () returned 0xffffffff
	[0072.277] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xbb000f, lpBuffer=0x19f300*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f300*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.277] GetCurrentProcess () returned 0xffffffff
	[0072.277] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x7632fd20, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.278] VirtualProtect (in: lpAddress=0xbb0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19f33c | out: lpflOldProtect=0x19f33c*=0x40) returned 1
	[0072.279] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x10) returned 0x26e04a0
	[0072.281] HeapFree (in: hHeap=0x26e0000, dwFlags=0x0, lpMem=0x26e0b40 | out: hHeap=0x26e0000) returned 1
	[0072.282] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e5830
	[0072.282] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e56f8
	[0072.283] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x10) returned 0x26e5770
	[0072.283] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xbd0000
	[0072.308] GetCurrentProcess () returned 0xffffffff
	[0072.308] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xbd0005, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.309] GetCurrentProcess () returned 0xffffffff
	[0072.309] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xbd000f, lpBuffer=0x19f300*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f300*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.311] GetCurrentProcess () returned 0xffffffff
	[0072.311] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x7631f120, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.311] VirtualProtect (in: lpAddress=0xbd0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19f33c | out: lpflOldProtect=0x19f33c*=0x40) returned 1
	[0072.313] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xc) returned 0x26e57a0
	[0072.313] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0xf) returned 0x26e5710
	[0072.313] GetModuleHandleA (lpModuleName="kernelbase.dll") returned 0x76c20000
	[0072.315] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x10) returned 0x26e57b8
	[0072.315] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xbe0000
	[0072.316] GetCurrentProcess () returned 0xffffffff
	[0072.316] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xbe0005, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.321] GetCurrentProcess () returned 0xffffffff
	[0072.321] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xbe000f, lpBuffer=0x19f300*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f300*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.324] GetCurrentProcess () returned 0xffffffff
	[0072.324] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x76ced140, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.325] VirtualProtect (in: lpAddress=0xbe0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19f33c | out: lpflOldProtect=0x19f33c*=0x40) returned 1
	[0072.326] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x20) returned 0x26e04b8
	[0072.326] HeapFree (in: hHeap=0x26e0000, dwFlags=0x0, lpMem=0x26e04a0 | out: hHeap=0x26e0000) returned 1
	[0072.328] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x10) returned 0x26e5758
	[0072.328] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xbf0000
	[0072.329] GetCurrentProcess () returned 0xffffffff
	[0072.329] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xbf0005, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.330] GetCurrentProcess () returned 0xffffffff
	[0072.330] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xbf000f, lpBuffer=0x19f300*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f300*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.331] GetCurrentProcess () returned 0xffffffff
	[0072.331] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x76cdb7a0, lpBuffer=0x19f2fc*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19f2fc*, lpNumberOfBytesWritten=0x0) returned 1
	[0072.332] VirtualProtect (in: lpAddress=0xbf0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19f33c | out: lpflOldProtect=0x19f33c*=0x40) returned 1
	[0072.333] ResumeThread (hThread=0xb0) returned 0x1
	[0072.333] CloseHandle (hObject=0xb0) returned 1
	[0072.334] HeapFree (in: hHeap=0x26e0000, dwFlags=0x0, lpMem=0x26e0a50 | out: hHeap=0x26e0000) returned 1
	[0072.334] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0xb0
	[0072.364] Thread32First (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.365] GetCurrentProcessId () returned 0x11ec
	[0072.365] GetCurrentThreadId () returned 0x1230
	[0072.365] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.367] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.368] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.369] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.370] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.371] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.371] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.372] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.373] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.374] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.375] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.376] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.377] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.378] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.379] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.380] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.381] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.382] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.383] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.384] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.385] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.386] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.387] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.388] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.390] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.391] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.391] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.392] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.393] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.394] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.395] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.396] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.397] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.401] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.401] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.402] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.403] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.404] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.405] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.409] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.410] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.411] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.412] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.413] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.413] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.414] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.415] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.416] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.417] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.419] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.420] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.422] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.423] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.425] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.426] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.427] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.428] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.429] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.430] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.431] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.432] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.433] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.434] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.435] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.436] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.436] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.437] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.438] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.439] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.439] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.440] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.441] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.454] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.455] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.456] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.456] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.457] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.458] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.459] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.459] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.460] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.461] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.462] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.463] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.494] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.496] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.497] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.498] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.499] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.501] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.502] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.503] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.504] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.506] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.507] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.507] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.508] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.509] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.519] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.520] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.521] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.522] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.523] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.524] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.525] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.526] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.527] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.528] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.529] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.547] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.549] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.551] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.552] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.552] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.554] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.555] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.556] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.557] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.558] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.559] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.560] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.561] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.561] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.562] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.563] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.564] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.565] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.566] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.566] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.567] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.568] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.569] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.570] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.571] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.572] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.573] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.574] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.575] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.576] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.577] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.578] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.578] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.579] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.580] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.581] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.582] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.583] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.585] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.589] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.590] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.591] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.592] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.592] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.594] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.595] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.596] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.596] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.597] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.598] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.599] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.601] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.602] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.602] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.603] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.605] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.606] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.607] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.608] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.609] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.610] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.610] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.611] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.612] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.613] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.613] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.614] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.615] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.615] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.616] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.617] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.618] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.618] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.619] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.620] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.620] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.621] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.622] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.623] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.623] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.624] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.624] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.625] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.628] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.629] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.630] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.631] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.631] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.632] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.633] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.633] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.634] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.635] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.635] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.636] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.637] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.637] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.638] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.639] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.639] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.640] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.641] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.642] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.642] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.643] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.643] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.644] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.645] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.645] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.646] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.647] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.647] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.648] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.648] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.649] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.650] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.650] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.651] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.652] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.652] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.653] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.653] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.654] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.655] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.655] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.656] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.657] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.657] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.658] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.659] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.659] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.660] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.661] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.662] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.663] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.665] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.666] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.666] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.667] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0072.668] Thread32Next (hSnapshot=0xb0, lpte=0x19f80c) returned 1
	[0073.221] OpenThread (dwDesiredAccess=0x2, bInheritHandle=0, dwThreadId=0x1244) returned 0xac
	[0073.222] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x4) returned 0x26e0a50
	[0073.222] CloseHandle (hObject=0xb0) returned 1
	[0073.223] SuspendThread (hThread=0xac) returned 0x0
	[0073.223] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77260000
	[0073.224] ResumeThread (hThread=0xac) returned 0x1
	[0073.224] CloseHandle (hObject=0xac) returned 1
	[0073.224] HeapFree (in: hHeap=0x26e0000, dwFlags=0x0, lpMem=0x26e0a50 | out: hHeap=0x26e0000) returned 1
	[0073.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fab8*=0x436000, NumberOfBytesToProtect=0x19fab0, NewAccessProtection=0x20, OldAccessProtection=0x19fdf8 | out: BaseAddress=0x19fab8*=0x436000, NumberOfBytesToProtect=0x19fab0, OldAccessProtection=0x19fdf8*=0x40) returned 0x0
	[0073.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fab8*=0x423000, NumberOfBytesToProtect=0x19fab0, NewAccessProtection=0x20, OldAccessProtection=0x19fdf8 | out: BaseAddress=0x19fab8*=0x423000, NumberOfBytesToProtect=0x19fab0, OldAccessProtection=0x19fdf8*=0x40) returned 0x0
	[0073.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fab8*=0x45b000, NumberOfBytesToProtect=0x19fab0, NewAccessProtection=0x4, OldAccessProtection=0x19fdf8 | out: BaseAddress=0x19fab8*=0x45b000, NumberOfBytesToProtect=0x19fab0, OldAccessProtection=0x19fdf8*=0x20) returned 0x0
	[0073.239] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0073.239] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x76c20000
	[0073.239] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76cdd740
	[0073.239] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x76c20000
	[0073.239] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76ce4490
	[0073.240] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76cdd7a0
	[0073.240] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x76c20000
	[0073.240] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76cdd740
	[0073.240] GetProcessHeap () returned 0xd60000
	[0073.240] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x76c20000
	[0073.240] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76ce4490
	[0073.240] GetLastError () returned 0x12
	[0073.240] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76ccf350
	[0073.240] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76cdd7a0
	[0073.240] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x364) returned 0xd71350
	[0073.241] SetLastError (dwErrCode=0x12) 
	[0073.241] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xe00) returned 0xd735f0
	[0073.242] GetStartupInfoW (in: lpStartupInfo=0x19fe9c | out: lpStartupInfo=0x19fe9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0073.242] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0073.242] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0073.242] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0073.242] GetCommandLineA () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe\" "
	[0073.243] GetCommandLineW () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe\" "
	[0073.243] GetACP () returned 0x4e4
	[0073.243] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x220) returned 0xd703d0
	[0073.243] IsValidCodePage (CodePage=0x4e4) returned 1
	[0073.243] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19febc | out: lpCPInfo=0x19febc) returned 1
	[0073.243] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f784 | out: lpCPInfo=0x19f784) returned 1
	[0073.243] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0073.243] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f528, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ恎AĀ") returned 256
	[0073.243] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ恎AĀ", cchSrc=256, lpCharType=0x19f798 | out: lpCharType=0x19f798) returned 1
	[0073.243] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0073.243] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0073.243] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x76c20000
	[0073.243] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cc95f0
	[0073.243] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0073.243] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x19f2c8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0073.243] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x19fc98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÀÓ+RÔþ\x19", lpUsedDefaultChar=0x0) returned 256
	[0073.243] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0073.243] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ慢AĀ") returned 256
	[0073.243] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ慢AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0073.243] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ慢AĀ", cchSrc=256, lpDestStr=0x19f2e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0073.243] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x19fb98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÀÓ+RÔþ\x19", lpUsedDefaultChar=0x0) returned 256
	[0073.244] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x80) returned 0xd6f430
	[0073.244] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19fce0, nSize=0x105 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe")) returned 0x62
	[0073.244] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x74530000
	[0073.244] GetProcAddress (hModule=0x74530000, lpProcName="AreFileApisANSI") returned 0x7454f300
	[0073.244] AreFileApisANSI () returned 1
	[0073.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 99
	[0073.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe", cchWideChar=-1, lpMultiByteStr=0x435770, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe", lpUsedDefaultChar=0x0) returned 99
	[0073.244] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x6b) returned 0xd6f4b8
	[0073.244] RtlInitializeSListHead (in: ListHead=0x435210 | out: ListHead=0x435210) 
	[0073.244] GetLastError () returned 0x0
	[0073.244] SetLastError (dwErrCode=0x0) 
	[0073.244] GetEnvironmentStringsW () returned 0xd71af8*
	[0073.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1293
	[0073.244] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x50d) returned 0xd743f8
	[0073.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0xd743f8, cbMultiByte=1293, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1293
	[0073.244] FreeEnvironmentStringsW (penv=0xd71af8) returned 1
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x90) returned 0xd705f8
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x1f) returned 0xd6aac0
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x2e) returned 0xd70690
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x37) returned 0xd706c8
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x3c) returned 0xd6fe40
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x31) returned 0xd6fe88
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x14) returned 0xd6a2b0
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x24) returned 0xd70708
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xd) returned 0xd72898
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x1d) returned 0xd6acf0
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x31) returned 0xd6fec8
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x15) returned 0xd6a1b0
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x17) returned 0xd6a1d0
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xe) returned 0xd72718
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x69) returned 0xd6ff08
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x3e) returned 0xd6ff80
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x1b) returned 0xd6ab88
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x1d) returned 0xd6aa20
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x48) returned 0xd71af8
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x12) returned 0xd6a250
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x18) returned 0xd6a1f0
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x1b) returned 0xd6ac28
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x24) returned 0xd716c0
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x29) returned 0xd71b48
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x1e) returned 0xd6abb0
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x6b) returned 0xd71b80
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x17) returned 0xd6a210
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xf) returned 0xd72730
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x16) returned 0xd72148
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x2a) returned 0xd72400
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x29) returned 0xd72438
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x12) returned 0xd72308
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x21) returned 0xd664d8
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x16) returned 0xd72228
	[0073.245] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x22) returned 0xd72470
	[0073.246] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x12) returned 0xd72028
	[0073.246] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd743f8 | out: hHeap=0xd60000) returned 1
	[0073.246] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x800) returned 0xd743f8
	[0073.246] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0073.246] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x407761) returned 0x0
	[0073.246] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x8) returned 0xd66bb0
	[0073.246] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x76c20000
	[0073.246] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cd6140
	[0073.247] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76ce79d0
	[0073.247] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x76c20000
	[0073.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76d334d0
	[0073.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cc6610
	[0073.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76d337a0
	[0073.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cbcd10
	[0073.247] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76ce4bf0
	[0073.247] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x76c20000
	[0073.247] GetProcAddress (hModule=0x76c20000, lpProcName="LCIDToLocaleName") returned 0x76cd6fc0
	[0073.247] GetProcAddress (hModule=0x76c20000, lpProcName="LocaleNameToLCID") returned 0x76cd7de0
	[0073.247] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x20) returned 0xd6aa48
	[0073.247] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x2) returned 0xd66bc0
	[0073.248] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd66bc0 | out: hHeap=0xd60000) returned 1
	[0073.248] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x2) returned 0xd66bc0
	[0073.248] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x8) returned 0xd66c40
	[0073.248] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x18) returned 0xd72128
	[0073.248] GetLastError () returned 0x0
	[0073.248] SetLastError (dwErrCode=0x0) 
	[0073.248] GetLastError () returned 0x0
	[0073.248] SetLastError (dwErrCode=0x0) 
	[0073.248] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xb8) returned 0xd724a0
	[0073.248] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6a6) returned 0xd75048
	[0073.248] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75048 | out: hHeap=0xd60000) returned 1
	[0073.248] GetLastError () returned 0x0
	[0073.248] SetLastError (dwErrCode=0x0) 
	[0073.248] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6) returned 0xd66c50
	[0073.248] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x2) returned 0xd72560
	[0073.249] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x4) returned 0xd72570
	[0073.249] GetLastError () returned 0x0
	[0073.249] SetLastError (dwErrCode=0x0) 
	[0073.249] GetLastError () returned 0x0
	[0073.249] SetLastError (dwErrCode=0x0) 
	[0073.249] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xb8) returned 0xd75048
	[0073.249] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6a6) returned 0xd75108
	[0073.249] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75108 | out: hHeap=0xd60000) returned 1
	[0073.249] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd66c50 | out: hHeap=0xd60000) returned 1
	[0073.249] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd724a0 | out: hHeap=0xd60000) returned 1
	[0073.249] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd72570 | out: hHeap=0xd60000) returned 1
	[0073.249] GetLastError () returned 0x0
	[0073.249] SetLastError (dwErrCode=0x0) 
	[0073.249] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6) returned 0xd66c50
	[0073.249] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x2) returned 0xd72570
	[0073.249] GetLastError () returned 0x0
	[0073.249] SetLastError (dwErrCode=0x0) 
	[0073.249] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x200) returned 0xd75108
	[0073.249] GetLastError () returned 0x0
	[0073.249] SetLastError (dwErrCode=0x0) 
	[0073.249] GetLastError () returned 0x0
	[0073.249] SetLastError (dwErrCode=0x0) 
	[0073.249] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x4) returned 0xd72580
	[0073.249] GetLastError () returned 0x0
	[0073.249] SetLastError (dwErrCode=0x0) 
	[0073.249] GetLastError () returned 0x0
	[0073.250] SetLastError (dwErrCode=0x0) 
	[0073.250] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xb8) returned 0xd724a0
	[0073.250] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6a6) returned 0xd75310
	[0073.250] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75310 | out: hHeap=0xd60000) returned 1
	[0073.250] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd66c50 | out: hHeap=0xd60000) returned 1
	[0073.250] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75048 | out: hHeap=0xd60000) returned 1
	[0073.250] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd72580 | out: hHeap=0xd60000) returned 1
	[0073.250] GetLastError () returned 0x0
	[0073.250] SetLastError (dwErrCode=0x0) 
	[0073.250] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6) returned 0xd66c50
	[0073.250] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd72570 | out: hHeap=0xd60000) returned 1
	[0073.250] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd72560 | out: hHeap=0xd60000) returned 1
	[0073.250] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x8) returned 0xd72560
	[0073.288] GetConsoleWindow () returned 0x0
	[0073.288] ShowWindow (hWnd=0x0, nCmdShow=0) returned 0
	[0073.288] Sleep (dwMilliseconds=0xfa0) 
	[0077.320] GetSystemInfo (in: lpSystemInfo=0xc3b4c | out: lpSystemInfo=0xc3b4c*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) 
	[0077.320] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x8) returned 0xd72570
	[0077.320] GetLastError () returned 0x578
	[0077.320] SetLastError (dwErrCode=0x578) 
	[0077.321] GetLastError () returned 0x578
	[0077.321] SetLastError (dwErrCode=0x578) 
	[0077.321] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xb8) returned 0xd75048
	[0077.321] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6a6) returned 0xd75310
	[0077.321] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75310 | out: hHeap=0xd60000) returned 1
	[0077.321] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd66c50 | out: hHeap=0xd60000) returned 1
	[0077.321] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd724a0 | out: hHeap=0xd60000) returned 1
	[0077.321] GetLastError () returned 0x578
	[0077.321] SetLastError (dwErrCode=0x578) 
	[0077.321] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6) returned 0xd66c50
	[0077.321] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x2) returned 0xd753a8
	[0077.321] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x4) returned 0xd75428
	[0077.321] GetLastError () returned 0x578
	[0077.321] SetLastError (dwErrCode=0x578) 
	[0077.321] GetLastError () returned 0x578
	[0077.321] SetLastError (dwErrCode=0x578) 
	[0077.321] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xb8) returned 0xd724a0
	[0077.321] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6a6) returned 0xd75518
	[0077.321] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75518 | out: hHeap=0xd60000) returned 1
	[0077.321] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd66c50 | out: hHeap=0xd60000) returned 1
	[0077.321] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75048 | out: hHeap=0xd60000) returned 1
	[0077.322] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75428 | out: hHeap=0xd60000) returned 1
	[0077.322] GetLastError () returned 0x578
	[0077.322] SetLastError (dwErrCode=0x578) 
	[0077.322] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6) returned 0xd753b8
	[0077.322] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x2) returned 0xd75378
	[0077.322] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x4) returned 0xd75478
	[0077.322] GetLastError () returned 0x578
	[0077.322] SetLastError (dwErrCode=0x578) 
	[0077.322] GetLastError () returned 0x578
	[0077.322] SetLastError (dwErrCode=0x578) 
	[0077.322] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xb8) returned 0xd75048
	[0077.322] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6a6) returned 0xd75518
	[0077.322] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75518 | out: hHeap=0xd60000) returned 1
	[0077.322] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd753b8 | out: hHeap=0xd60000) returned 1
	[0077.322] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd724a0 | out: hHeap=0xd60000) returned 1
	[0077.322] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75478 | out: hHeap=0xd60000) returned 1
	[0077.322] GetLastError () returned 0x578
	[0077.322] SetLastError (dwErrCode=0x578) 
	[0077.322] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6) returned 0xd75448
	[0077.323] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75378 | out: hHeap=0xd60000) returned 1
	[0077.323] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd753a8 | out: hHeap=0xd60000) returned 1
	[0077.323] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x8) returned 0xd753c8
	[0077.323] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x18) returned 0xd722a8
	[0077.323] GetLastError () returned 0x578
	[0077.323] SetLastError (dwErrCode=0x578) 
	[0077.323] GetLastError () returned 0x578
	[0077.323] SetLastError (dwErrCode=0x578) 
	[0077.323] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xb8) returned 0xd724a0
	[0077.323] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6a6) returned 0xd75518
	[0077.323] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75518 | out: hHeap=0xd60000) returned 1
	[0077.323] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75448 | out: hHeap=0xd60000) returned 1
	[0077.323] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75048 | out: hHeap=0xd60000) returned 1
	[0077.323] GetLastError () returned 0x578
	[0077.324] SetLastError (dwErrCode=0x578) 
	[0077.324] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6) returned 0xd754d8
	[0077.324] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x2) returned 0xd75388
	[0077.324] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x4) returned 0xd75378
	[0077.324] GetLastError () returned 0x578
	[0077.324] SetLastError (dwErrCode=0x578) 
	[0077.324] GetLastError () returned 0x578
	[0077.324] SetLastError (dwErrCode=0x578) 
	[0077.324] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xb8) returned 0xd75048
	[0077.324] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6a6) returned 0xd75518
	[0077.324] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75518 | out: hHeap=0xd60000) returned 1
	[0077.324] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd754d8 | out: hHeap=0xd60000) returned 1
	[0077.324] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd724a0 | out: hHeap=0xd60000) returned 1
	[0077.324] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75378 | out: hHeap=0xd60000) returned 1
	[0077.324] GetLastError () returned 0x578
	[0077.324] SetLastError (dwErrCode=0x578) 
	[0077.324] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6) returned 0xd75408
	[0077.324] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x2) returned 0xd75398
	[0077.324] GetLastError () returned 0x578
	[0077.324] SetLastError (dwErrCode=0x578) 
	[0077.324] GetLastError () returned 0x578
	[0077.324] SetLastError (dwErrCode=0x578) 
	[0077.325] GetLastError () returned 0x578
	[0077.325] SetLastError (dwErrCode=0x578) 
	[0077.325] GetLastError () returned 0x578
	[0077.325] SetLastError (dwErrCode=0x578) 
	[0077.325] GetLastError () returned 0x578
	[0077.325] SetLastError (dwErrCode=0x578) 
	[0077.325] GetLastError () returned 0x578
	[0077.325] SetLastError (dwErrCode=0x578) 
	[0077.325] GetLastError () returned 0x578
	[0077.325] SetLastError (dwErrCode=0x578) 
	[0077.325] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x1) returned 0xd753d8
	[0077.325] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x6) returned 0xd753e8
	[0077.325] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x5) returned 0xd753a8
	[0077.325] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x4) returned 0xd75508
	[0077.325] GetLastError () returned 0x578
	[0077.325] SetLastError (dwErrCode=0x578) 
	[0077.325] GetLastError () returned 0x578
	[0077.325] SetLastError (dwErrCode=0x578) 
	[0077.325] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0xb8) returned 0xd724a0
	[0077.325] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6a6) returned 0xd75518
	[0077.325] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75518 | out: hHeap=0xd60000) returned 1
	[0077.325] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75408 | out: hHeap=0xd60000) returned 1
	[0077.325] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75048 | out: hHeap=0xd60000) returned 1
	[0077.326] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75508 | out: hHeap=0xd60000) returned 1
	[0077.326] GetLastError () returned 0x578
	[0077.326] SetLastError (dwErrCode=0x578) 
	[0077.326] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x6) returned 0xd754b8
	[0077.326] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75398 | out: hHeap=0xd60000) returned 1
	[0077.326] HeapFree (in: hHeap=0xd60000, dwFlags=0x0, lpMem=0xd75388 | out: hHeap=0xd60000) returned 1
	[0077.326] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x0, Size=0x8) returned 0xd75508
	[0077.326] GetLastError () returned 0x578
	[0077.326] SetLastError (dwErrCode=0x578) 
	[0077.326] RtlAllocateHeap (HeapHandle=0xd60000, Flags=0x8, Size=0x1000) returned 0xd75518
	[0077.326] GetLastError () returned 0x578
	[0077.326] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76ccf350
	[0077.326] SetLastError (dwErrCode=0x578) 
	[0077.326] GetLastError () returned 0x578
	[0077.327] SetLastError (dwErrCode=0x578) 
	[0077.327] GetLastError () returned 0x578
	[0077.327] SetLastError (dwErrCode=0x578) 
	[0077.327] GetLastError () returned 0x578
	[0077.327] SetLastError (dwErrCode=0x578) 
	[0077.327] GetLastError () returned 0x578
	[0077.327] SetLastError (dwErrCode=0x578) 
	[0077.327] GetLastError () returned 0x578
	[0077.327] SetLastError (dwErrCode=0x578) 
	[0077.330] SendMessageCallbackA (hWnd=0x0, Msg=0x4, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.330] GetLastError () returned 0x578
	[0077.331] SetLastError (dwErrCode=0x578) 
	[0077.331] SendMessageCallbackA (hWnd=0x0, Msg=0x5, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.331] GetLastError () returned 0x578
	[0077.331] SetLastError (dwErrCode=0x578) 
	[0077.332] SendMessageCallbackA (hWnd=0x0, Msg=0x6, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.332] GetLastError () returned 0x578
	[0077.332] SetLastError (dwErrCode=0x578) 
	[0077.333] SendMessageCallbackA (hWnd=0x0, Msg=0x7, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.333] GetLastError () returned 0x578
	[0077.333] SetLastError (dwErrCode=0x578) 
	[0077.334] SendMessageCallbackA (hWnd=0x0, Msg=0x8, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.334] GetLastError () returned 0x578
	[0077.334] SetLastError (dwErrCode=0x578) 
	[0077.334] SendMessageCallbackA (hWnd=0x0, Msg=0x9, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.349] GetLastError () returned 0x578
	[0077.349] SetLastError (dwErrCode=0x578) 
	[0077.350] SendMessageCallbackA (hWnd=0x0, Msg=0xa, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.350] GetLastError () returned 0x578
	[0077.350] SetLastError (dwErrCode=0x578) 
	[0077.351] SendMessageCallbackA (hWnd=0x0, Msg=0xb, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.351] GetLastError () returned 0x578
	[0077.351] SetLastError (dwErrCode=0x578) 
	[0077.352] SendMessageCallbackA (hWnd=0x0, Msg=0xc, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.352] GetLastError () returned 0x578
	[0077.352] SetLastError (dwErrCode=0x578) 
	[0077.353] SendMessageCallbackA (hWnd=0x0, Msg=0xd, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.354] GetLastError () returned 0x578
	[0077.354] SetLastError (dwErrCode=0x578) 
	[0077.354] SendMessageCallbackA (hWnd=0x0, Msg=0xe, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.354] GetLastError () returned 0x578
	[0077.354] SetLastError (dwErrCode=0x578) 
	[0077.355] SendMessageCallbackA (hWnd=0x0, Msg=0xf, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.355] GetLastError () returned 0x578
	[0077.355] SetLastError (dwErrCode=0x578) 
	[0077.356] SendMessageCallbackA (hWnd=0x0, Msg=0x10, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.356] GetLastError () returned 0x578
	[0077.356] SetLastError (dwErrCode=0x578) 
	[0077.357] SendMessageCallbackA (hWnd=0x0, Msg=0x11, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.357] GetLastError () returned 0x578
	[0077.357] SetLastError (dwErrCode=0x578) 
	[0077.357] SendMessageCallbackA (hWnd=0x0, Msg=0x12, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.357] GetLastError () returned 0x578
	[0077.357] SetLastError (dwErrCode=0x578) 
	[0077.358] SendMessageCallbackA (hWnd=0x0, Msg=0x13, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.358] GetLastError () returned 0x578
	[0077.358] SetLastError (dwErrCode=0x578) 
	[0077.367] SendMessageCallbackA (hWnd=0x0, Msg=0x14, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.367] GetLastError () returned 0x578
	[0077.367] SetLastError (dwErrCode=0x578) 
	[0077.368] SendMessageCallbackA (hWnd=0x0, Msg=0x15, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.368] GetLastError () returned 0x578
	[0077.368] SetLastError (dwErrCode=0x578) 
	[0077.369] SendMessageCallbackA (hWnd=0x0, Msg=0x16, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.369] GetLastError () returned 0x578
	[0077.369] SetLastError (dwErrCode=0x578) 
	[0077.370] SendMessageCallbackA (hWnd=0x0, Msg=0x17, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.370] GetLastError () returned 0x578
	[0077.370] SetLastError (dwErrCode=0x578) 
	[0077.370] SendMessageCallbackA (hWnd=0x0, Msg=0x18, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.371] GetLastError () returned 0x578
	[0077.371] SetLastError (dwErrCode=0x578) 
	[0077.371] SendMessageCallbackA (hWnd=0x0, Msg=0x19, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.371] GetLastError () returned 0x578
	[0077.371] SetLastError (dwErrCode=0x578) 
	[0077.372] SendMessageCallbackA (hWnd=0x0, Msg=0x1a, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.372] GetLastError () returned 0x578
	[0077.372] SetLastError (dwErrCode=0x578) 
	[0077.373] SendMessageCallbackA (hWnd=0x0, Msg=0x1b, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.374] GetLastError () returned 0x578
	[0077.375] SetLastError (dwErrCode=0x578) 
	[0077.375] SendMessageCallbackA (hWnd=0x0, Msg=0x1c, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.375] GetLastError () returned 0x578
	[0077.375] SetLastError (dwErrCode=0x578) 
	[0077.376] SendMessageCallbackA (hWnd=0x0, Msg=0x1d, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.376] GetLastError () returned 0x578
	[0077.376] SetLastError (dwErrCode=0x578) 
	[0077.377] SendMessageCallbackA (hWnd=0x0, Msg=0x1e, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.377] GetLastError () returned 0x578
	[0077.377] SetLastError (dwErrCode=0x578) 
	[0077.378] SendMessageCallbackA (hWnd=0x0, Msg=0x1f, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.378] GetLastError () returned 0x578
	[0077.378] SetLastError (dwErrCode=0x578) 
	[0077.378] SendMessageCallbackA (hWnd=0x0, Msg=0x20, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.379] GetLastError () returned 0x578
	[0077.379] SetLastError (dwErrCode=0x578) 
	[0077.379] SendMessageCallbackA (hWnd=0x0, Msg=0x21, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.379] GetLastError () returned 0x578
	[0077.380] SetLastError (dwErrCode=0x578) 
	[0077.380] SendMessageCallbackA (hWnd=0x0, Msg=0x22, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.380] GetLastError () returned 0x578
	[0077.380] SetLastError (dwErrCode=0x578) 
	[0077.380] SendMessageCallbackA (hWnd=0x0, Msg=0x23, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.381] GetLastError () returned 0x578
	[0077.381] SetLastError (dwErrCode=0x578) 
	[0077.381] SendMessageCallbackA (hWnd=0x0, Msg=0x24, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.381] GetLastError () returned 0x578
	[0077.381] SetLastError (dwErrCode=0x578) 
	[0077.381] SendMessageCallbackA (hWnd=0x0, Msg=0x25, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.381] GetLastError () returned 0x578
	[0077.381] SetLastError (dwErrCode=0x578) 
	[0077.382] SendMessageCallbackA (hWnd=0x0, Msg=0x26, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.382] GetLastError () returned 0x578
	[0077.382] SetLastError (dwErrCode=0x578) 
	[0077.382] SendMessageCallbackA (hWnd=0x0, Msg=0x27, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.383] GetLastError () returned 0x578
	[0077.383] SetLastError (dwErrCode=0x578) 
	[0077.384] SendMessageCallbackA (hWnd=0x0, Msg=0x28, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.384] GetLastError () returned 0x578
	[0077.384] SetLastError (dwErrCode=0x578) 
	[0077.384] SendMessageCallbackA (hWnd=0x0, Msg=0x29, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.384] GetLastError () returned 0x578
	[0077.384] SetLastError (dwErrCode=0x578) 
	[0077.385] SendMessageCallbackA (hWnd=0x0, Msg=0x2a, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.385] GetLastError () returned 0x578
	[0077.385] SetLastError (dwErrCode=0x578) 
	[0077.385] SendMessageCallbackA (hWnd=0x0, Msg=0x2b, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.385] GetLastError () returned 0x578
	[0077.385] SetLastError (dwErrCode=0x578) 
	[0077.386] SendMessageCallbackA (hWnd=0x0, Msg=0x2c, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.386] GetLastError () returned 0x578
	[0077.386] SetLastError (dwErrCode=0x578) 
	[0077.386] SendMessageCallbackA (hWnd=0x0, Msg=0x2d, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.386] GetLastError () returned 0x578
	[0077.386] SetLastError (dwErrCode=0x578) 
	[0077.387] SendMessageCallbackA (hWnd=0x0, Msg=0x2e, wParam=0x0, lParam=0x0, lpResultCallBack=0x0, dwData=0x0) returned 0
	[0077.387] GetLastError () returned 0x578
	[0077.387] SetLastError (dwErrCode=0x578) 
	[0077.387] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74530000
	[0077.388] GetProcAddress (hModule=0x74530000, lpProcName="VirtualProtect") returned 0x74547a50
	[0077.388] VirtualProtect (in: lpAddress=0x19f710, dwSize=0x77e, flNewProtect=0x40, lpflOldProtect=0xc3a6c | out: lpflOldProtect=0xc3a6c*=0x4) returned 1
	[0077.389] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0077.389] GetThreadUILanguage () returned 0xc0409
	[0077.390] GetThreadLocale () returned 0x409
	[0077.390] GetUserDefaultLCID () returned 0x409
	[0077.391] GetUserDefaultLCID () returned 0x409
	[0077.391] GetSystemDefaultLCID () returned 0x409
	[0077.391] GetSystemDefaultLCID () returned 0x409
	[0077.392] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x18) returned 0x26e04e0
	[0077.392] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x4) returned 0x26e0a50
	[0077.393] LoadResource (hModule=0x400000, hResInfo=0x26e04e4) returned 0x26f0048
	[0077.393] RtlAllocateHeap (HeapHandle=0x26e0000, Flags=0x0, Size=0x17e00) returned 0x26f0048
	[0077.395] LockResource (hResData=0x26f0048) returned 0x26f0048
	[0077.395] SizeofResource (hModule=0x400000, hResInfo=0x26e04e4) returned 0x17e00
	[0077.396] wcscat (in: _Dest=0x19fe90, _Source="k\\v4.0.30319\\AppLaunch.exe" | out: _Dest="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe") returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe"
	[0077.398] CreateProcessW (in: lpApplicationName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xc398c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xc3ac8 | out: lpCommandLine=0x0, lpProcessInformation=0xc3ac8*(hProcess=0xb0, hThread=0xac, dwProcessId=0xe4c, dwThreadId=0xe64)) returned 1
	[0077.698] GetThreadContext (in: hThread=0xac, lpContext=0xc36c0 | out: lpContext=0xc36c0*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x242000, Edx=0x0, Ecx=0x0, Eax=0x12ceb7c, Ebp=0x0, Eip=0x772d8fe0, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0077.700] ReadProcessMemory (in: hProcess=0xb0, lpBaseAddress=0x242008, lpBuffer=0xc3ab0, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xc3ab0*, lpNumberOfBytesRead=0x0) returned 1
	[0077.703] VirtualAlloc (lpAddress=0x0, dwSize=0x1e000, flAllocationType=0x3000, flProtect=0x40) returned 0xc00000
	[0077.704] VirtualAllocEx (hProcess=0xb0, lpAddress=0x400000, dwSize=0x1e000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000
	[0077.708] WriteProcessMemory (in: hProcess=0xb0, lpBaseAddress=0x400000, lpBuffer=0xc00000*, nSize=0x1e000, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xc00000*, lpNumberOfBytesWritten=0x0) returned 1
	[0077.725] VirtualProtectEx (in: hProcess=0xb0, lpAddress=0x400000, dwSize=0x200, flNewProtect=0x2, lpflOldProtect=0xc3a4c | out: lpflOldProtect=0xc3a4c*=0x40) returned 1
	[0078.249] VirtualProtectEx (in: hProcess=0xb0, lpAddress=0x402000, dwSize=0x17344, flNewProtect=0x20, lpflOldProtect=0xc3a4c | out: lpflOldProtect=0xc3a4c*=0x40) returned 1
	[0078.256] VirtualProtectEx (in: hProcess=0xb0, lpAddress=0x41a000, dwSize=0x4de, flNewProtect=0x2, lpflOldProtect=0xc3a4c | out: lpflOldProtect=0xc3a4c*=0x40) returned 1
	[0078.258] VirtualProtectEx (in: hProcess=0xb0, lpAddress=0x41c000, dwSize=0xc, flNewProtect=0x2, lpflOldProtect=0xc3a4c | out: lpflOldProtect=0xc3a4c*=0x40) returned 1
	[0078.267] VirtualFree (lpAddress=0xc00000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0078.271] WriteProcessMemory (in: hProcess=0xb0, lpBaseAddress=0x242008, lpBuffer=0xc3ae0*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xc3ae0*, lpNumberOfBytesWritten=0x0) returned 1
	[0078.279] SetThreadContext (hThread=0xac, lpContext=0xc36c0*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x242000, Edx=0x0, Ecx=0x0, Eax=0x41933e, Ebp=0x0, Eip=0x772d8fe0, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0078.311] ResumeThread (hThread=0xac) returned 0x1
	[0078.631] CloseHandle (hObject=0xb0) returned 1
	[0078.631] CloseHandle (hObject=0xac) returned 1

Thread:
	id = 2
	os_tid = 0x1244


Process:
	id = "2"
	image_name = "applaunch.exe"
	filename = "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe"
	page_root = "0x4464e000"
	os_pid = "0xe4c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x11ec"
	cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe\""
	cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd44" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 818
	        start_va = 0x10000
	          end_va = 0x2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 819
	        start_va = 0x30000
	          end_va = 0x31fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 820
	        start_va = 0x40000
	          end_va = 0x54fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 821
	        start_va = 0x60000
	          end_va = 0x9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 822
	        start_va = 0xa0000
	          end_va = 0x19ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 823
	        start_va = 0x1a0000
	          end_va = 0x1a3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 824
	        start_va = 0x1b0000
	          end_va = 0x1b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001b0000"
	        filename = ""

Region:
	              id = 825
	        start_va = 0x1c0000
	          end_va = 0x1c1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 826
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 827
	        start_va = 0x12c0000
	          end_va = 0x12d7fff
	       monitored = 0
	     entry_point = 0x12ceb7c
	     region_type = mapped_file
	            name = "applaunch.exe"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe")

Region:
	              id = 828
	        start_va = 0x77260000
	          end_va = 0x773dafff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 829
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 830
	        start_va = 0xfffb0000
	          end_va = 0xfffd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000fffb0000"
	        filename = ""

Region:
	              id = 831
	        start_va = 0xfffe0000
	          end_va = 0x7ffc5f80ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000fffe0000"
	        filename = ""

Region:
	              id = 832
	        start_va = 0x7ffc5f810000
	          end_va = 0x7ffc5f9d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 833
	        start_va = 0x7ffc5f9d1000
	          end_va = 0x7ffffffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ffc5f9d1000"
	        filename = ""

Region:
	              id = 835
	        start_va = 0x400000
	          end_va = 0x41dfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 836
	        start_va = 0x590000
	          end_va = 0x59ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000590000"
	        filename = ""

Region:
	              id = 837
	        start_va = 0x62ee0000
	          end_va = 0x62f2ffff
	       monitored = 0
	     entry_point = 0x62ef8180
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 838
	        start_va = 0x62f30000
	          end_va = 0x62fa9fff
	       monitored = 0
	     entry_point = 0x62f43290
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 839
	        start_va = 0x74530000
	          end_va = 0x7460ffff
	       monitored = 0
	     entry_point = 0x74543980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 840
	        start_va = 0x62fb0000
	          end_va = 0x62fb7fff
	       monitored = 0
	     entry_point = 0x62fb17c0
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 841
	        start_va = 0x5a0000
	          end_va = 0x78ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005a0000"
	        filename = ""

Region:
	              id = 842
	        start_va = 0x6cd80000
	          end_va = 0x6cdd8fff
	       monitored = 1
	     entry_point = 0x6cd90780
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 843
	        start_va = 0x74530000
	          end_va = 0x7460ffff
	       monitored = 0
	     entry_point = 0x74543980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 844
	        start_va = 0x76c20000
	          end_va = 0x76d9dfff
	       monitored = 0
	     entry_point = 0x76cd1b90
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 845
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 846
	        start_va = 0xffeb0000
	          end_va = 0xfffaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000ffeb0000"
	        filename = ""

Region:
	              id = 984
	        start_va = 0x1d0000
	          end_va = 0x1fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 985
	        start_va = 0x420000
	          end_va = 0x4ddfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 986
	        start_va = 0x7fff0000
	          end_va = 0x7fffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 987
	        start_va = 0x80000000
	          end_va = 0x8000ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000080000000"
	        filename = ""

Region:
	              id = 988
	        start_va = 0x20000
	          end_va = 0x23fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 989
	        start_va = 0x76a90000
	          end_va = 0x76b0afff
	       monitored = 0
	     entry_point = 0x76aae970
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 990
	        start_va = 0x74290000
	          end_va = 0x7434dfff
	       monitored = 0
	     entry_point = 0x742c5630
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 991
	        start_va = 0x4e0000
	          end_va = 0x51ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004e0000"
	        filename = ""

Region:
	              id = 992
	        start_va = 0x790000
	          end_va = 0x88ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000790000"
	        filename = ""

Region:
	              id = 993
	        start_va = 0x74a40000
	          end_va = 0x74a83fff
	       monitored = 0
	     entry_point = 0x74a59d80
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 994
	        start_va = 0x75f60000
	          end_va = 0x7600cfff
	       monitored = 0
	     entry_point = 0x75f74f00
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 995
	        start_va = 0x73f90000
	          end_va = 0x73fadfff
	       monitored = 0
	     entry_point = 0x73f9b640
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 996
	        start_va = 0x73f80000
	          end_va = 0x73f89fff
	       monitored = 0
	     entry_point = 0x73f82a00
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 997
	        start_va = 0x75ef0000
	          end_va = 0x75f47fff
	       monitored = 0
	     entry_point = 0x75f325c0
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 998
	        start_va = 0x890000
	          end_va = 0x9cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000890000"
	        filename = ""

Region:
	              id = 999
	        start_va = 0x6c200000
	          end_va = 0x6c278fff
	       monitored = 1
	     entry_point = 0x6c20f82a
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 1003
	        start_va = 0x76f60000
	          end_va = 0x76fa4fff
	       monitored = 0
	     entry_point = 0x76f7de90
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 1004
	        start_va = 0x76da0000
	          end_va = 0x76f5cfff
	       monitored = 0
	     entry_point = 0x76e82a10
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll")

Region:
	              id = 1005
	        start_va = 0x76010000
	          end_va = 0x7615efff
	       monitored = 0
	     entry_point = 0x760c6820
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 1006
	        start_va = 0x76300000
	          end_va = 0x76446fff
	       monitored = 0
	     entry_point = 0x76311cf0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 1007
	        start_va = 0x520000
	          end_va = 0x549fff
	       monitored = 0
	     entry_point = 0x525680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1008
	        start_va = 0x9d0000
	          end_va = 0xb57fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1009
	        start_va = 0x77150000
	          end_va = 0x7717afff
	       monitored = 0
	     entry_point = 0x77155680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1010
	        start_va = 0x30000
	          end_va = 0x30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1011
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 1012
	        start_va = 0x1f0000
	          end_va = 0x1fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 1013
	        start_va = 0xb60000
	          end_va = 0xce0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b60000"
	        filename = ""

Region:
	              id = 1014
	        start_va = 0x12e0000
	          end_va = 0x26dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000012e0000"
	        filename = ""

Region:
	              id = 1015
	        start_va = 0x74350000
	          end_va = 0x7435bfff
	       monitored = 0
	     entry_point = 0x74353930
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll")

Region:
	              id = 1016
	        start_va = 0x6cd70000
	          end_va = 0x6cd77fff
	       monitored = 0
	     entry_point = 0x6cd717b0
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 1023
	        start_va = 0x6bb40000
	          end_va = 0x6c1f0fff
	       monitored = 1
	     entry_point = 0x6bb55d20
	     region_type = mapped_file
	            name = "clr.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")

Region:
	              id = 1024
	        start_va = 0x6ba40000
	          end_va = 0x6bb34fff
	       monitored = 0
	     entry_point = 0x6ba94160
	     region_type = mapped_file
	            name = "msvcr120_clr0400.dll"
	        filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll")

Region:
	              id = 1025
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 1026
	        start_va = 0x520000
	          end_va = 0x52ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000520000"
	        filename = ""

Region:
	              id = 1027
	        start_va = 0x530000
	          end_va = 0x53ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000530000"
	        filename = ""

Region:
	              id = 1028
	        start_va = 0x540000
	          end_va = 0x54ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000540000"
	        filename = ""

Region:
	              id = 1029
	        start_va = 0x550000
	          end_va = 0x55ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000550000"
	        filename = ""

Region:
	              id = 1030
	        start_va = 0x560000
	          end_va = 0x56ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000560000"
	        filename = ""

Region:
	              id = 1031
	        start_va = 0x570000
	          end_va = 0x57ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000570000"
	        filename = ""

Region:
	              id = 1032
	        start_va = 0x580000
	          end_va = 0x580fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000580000"
	        filename = ""

Region:
	              id = 1033
	        start_va = 0x5a0000
	          end_va = 0x5a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005a0000"
	        filename = ""

Region:
	              id = 1034
	        start_va = 0x690000
	          end_va = 0x78ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000690000"
	        filename = ""

Region:
	              id = 1035
	        start_va = 0x5b0000
	          end_va = 0x63ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005b0000"
	        filename = ""

Region:
	              id = 1036
	        start_va = 0xcf0000
	          end_va = 0xecffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000cf0000"
	        filename = ""

Region:
	              id = 1037
	        start_va = 0x5b0000
	          end_va = 0x5effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005b0000"
	        filename = ""

Region:
	              id = 1038
	        start_va = 0x630000
	          end_va = 0x63ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000630000"
	        filename = ""

Region:
	              id = 1039
	        start_va = 0x890000
	          end_va = 0x98ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000890000"
	        filename = ""

Region:
	              id = 1040
	        start_va = 0x9c0000
	          end_va = 0x9cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009c0000"
	        filename = ""

Region:
	              id = 1041
	        start_va = 0x5f0000
	          end_va = 0x5fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005f0000"
	        filename = ""

Region:
	              id = 1042
	        start_va = 0x26e0000
	          end_va = 0x46dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000026e0000"
	        filename = ""

Region:
	              id = 1043
	        start_va = 0xcf0000
	          end_va = 0xd8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000cf0000"
	        filename = ""

Region:
	              id = 1044
	        start_va = 0xec0000
	          end_va = 0xecffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ec0000"
	        filename = ""

Region:
	              id = 1045
	        start_va = 0x5f0000
	          end_va = 0x62ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005f0000"
	        filename = ""

Region:
	              id = 1046
	        start_va = 0xd90000
	          end_va = 0xe8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d90000"
	        filename = ""

Region:
	              id = 1054
	        start_va = 0xed0000
	          end_va = 0x1206fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1056
	        start_va = 0x6a810000
	          end_va = 0x6ba37fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll")

Region:
	              id = 1058
	        start_va = 0x76b10000
	          end_va = 0x76bfafff
	       monitored = 0
	     entry_point = 0x76b4d650
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1059
	        start_va = 0x1210000
	          end_va = 0x12a0fff
	       monitored = 0
	     entry_point = 0x1248cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 1060
	        start_va = 0x640000
	          end_va = 0x64ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000640000"
	        filename = ""

Region:
	              id = 1064
	        start_va = 0x69e60000
	          end_va = 0x6a80bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\cc4e5d110dd318e8b7d61a9ed184ab74\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\cc4e5d110dd318e8b7d61a9ed184ab74\\system.ni.dll")

Region:
	              id = 1066
	        start_va = 0x69740000
	          end_va = 0x69e51fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.core.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\abad45b9cc652ba7e38c4c837234c0ab\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\abad45b9cc652ba7e38c4c837234c0ab\\system.core.ni.dll")

Region:
	              id = 1090
	        start_va = 0x650000
	          end_va = 0x65ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000650000"
	        filename = ""

Region:
	              id = 1092
	        start_va = 0x696c0000
	          end_va = 0x6973dfff
	       monitored = 1
	     entry_point = 0x696c1140
	     region_type = mapped_file
	            name = "clrjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")

Region:
	              id = 1093
	        start_va = 0x743f0000
	          end_va = 0x74481fff
	       monitored = 0
	     entry_point = 0x74428cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 1095
	        start_va = 0x660000
	          end_va = 0x66ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000660000"
	        filename = ""

Region:
	              id = 1106
	        start_va = 0x670000
	          end_va = 0x67ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000670000"
	        filename = ""

Region:
	              id = 1107
	        start_va = 0x680000
	          end_va = 0x68ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000680000"
	        filename = ""

Region:
	              id = 1108
	        start_va = 0x1210000
	          end_va = 0x124ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1116
	        start_va = 0x515c0000
	          end_va = 0x51ba7fff
	       monitored = 1
	     entry_point = 0x51b930d6
	     region_type = mapped_file
	            name = "system.servicemodel.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.servicemodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.servicemodel.dll")

Region:
	              id = 1119
	        start_va = 0x46e0000
	          end_va = 0x4cc7fff
	       monitored = 1
	     entry_point = 0x4cb30d6
	     region_type = mapped_file
	            name = "system.servicemodel.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.servicemodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.servicemodel.dll")

Region:
	              id = 1120
	        start_va = 0x1250000
	          end_va = 0x128ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001250000"
	        filename = ""

Region:
	              id = 1121
	        start_va = 0x670000
	          end_va = 0x67ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000670000"
	        filename = ""

Region:
	              id = 1123
	        start_va = 0x680000
	          end_va = 0x68ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000680000"
	        filename = ""

Region:
	              id = 1132
	        start_va = 0x990000
	          end_va = 0x99ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000990000"
	        filename = ""

Region:
	              id = 1133
	        start_va = 0x9a0000
	          end_va = 0x9affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009a0000"
	        filename = ""

Region:
	              id = 1134
	        start_va = 0x9b0000
	          end_va = 0x9bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009b0000"
	        filename = ""

Region:
	              id = 1136
	        start_va = 0x6cbb0000
	          end_va = 0x6cbcdfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "smdiagnostics.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\SMDiagnostics\\607f34b8be4f2014b99872617699b357\\SMDiagnostics.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\smdiagnostics\\607f34b8be4f2014b99872617699b357\\smdiagnostics.ni.dll")

Region:
	              id = 1137
	        start_va = 0x6fe40000
	          end_va = 0x6fe52fff
	       monitored = 0
	     entry_point = 0x6fe49950
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 1138
	        start_va = 0x6fe10000
	          end_va = 0x6fe3efff
	       monitored = 0
	     entry_point = 0x6fe295e0
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1140
	        start_va = 0x73c30000
	          end_va = 0x73c4afff
	       monitored = 0
	     entry_point = 0x73c39050
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 1141
	        start_va = 0x9b0000
	          end_va = 0x9bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009b0000"
	        filename = ""

Region:
	              id = 1142
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1143
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1144
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1145
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1146
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1147
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1148
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1149
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1150
	        start_va = 0x68f80000
	          end_va = 0x69227fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.runtime.serialization.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runteb92aa12#\\43ca3f2fcd379964cef1dc5898cb9248\\System.Runtime.Serialization.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runteb92aa12#\\43ca3f2fcd379964cef1dc5898cb9248\\system.runtime.serialization.ni.dll")

Region:
	              id = 1151
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1153
	        start_va = 0x68eb0000
	          end_va = 0x68f72fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.servicemodel.internals.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servd1dec626#\\80366b2f53761589c602827eb7cee9f2\\System.ServiceModel.Internals.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.servd1dec626#\\80366b2f53761589c602827eb7cee9f2\\system.servicemodel.internals.ni.dll")

Region:
	              id = 1157
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1158
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1159
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1160
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1161
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1162
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1163
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1165
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1166
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1169
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1170
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1171
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1173
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1174
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1175
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1177
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1178
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1179
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1180
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1181
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1182
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1183
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1184
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1185
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1192
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1193
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1195
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1196
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1197
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1198
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1199
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1200
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1201
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1202
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1204
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1205
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1208
	        start_va = 0x68790000
	          end_va = 0x68ea5fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.xml.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\1f87b5140145c221b5201351fffc52d8\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\1f87b5140145c221b5201351fffc52d8\\system.xml.ni.dll")

Region:
	              id = 1212
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1213
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1214
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1215
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1218
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1219
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1220
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1223
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1224
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1225
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1226
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1227
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1228
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1229
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1230
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1231
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1232
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1233
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1234
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1236
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1237
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1238
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1239
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1240
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1241
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1242
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1243
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1244
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1252
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1253
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1254
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1255
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1256
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1257
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1258
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1259
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1260
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1261
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1262
	        start_va = 0x693f0000
	          end_va = 0x694defff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.configuration.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\1b51e779650e38bb712f3e535efcf132\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\1b51e779650e38bb712f3e535efcf132\\system.configuration.ni.dll")

Region:
	              id = 1263
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1264
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1265
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1266
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1267
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1268
	        start_va = 0xea0000
	          end_va = 0xeaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ea0000"
	        filename = ""

Region:
	              id = 1269
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1270
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1271
	        start_va = 0x1240000
	          end_va = 0x124ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001240000"
	        filename = ""

Region:
	              id = 1272
	        start_va = 0x1220000
	          end_va = 0x122ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001220000"
	        filename = ""

Region:
	              id = 1273
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1274
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1275
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1276
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1277
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1278
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1279
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1280
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1281
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1282
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1283
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1284
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1285
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1286
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1287
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1288
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1289
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1290
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1291
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1292
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1293
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1294
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1295
	        start_va = 0x69340000
	          end_va = 0x693edfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.transactions.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Transactions\\8a03e2886313defa91cef9f385480f4e\\System.Transactions.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.transactions\\8a03e2886313defa91cef9f385480f4e\\system.transactions.ni.dll")

Region:
	              id = 1296
	        start_va = 0x692f0000
	          end_va = 0x6933afff
	       monitored = 1
	     entry_point = 0x6930f53e
	     region_type = mapped_file
	            name = "system.transactions.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll")

Region:
	              id = 1297
	        start_va = 0x4cd0000
	          end_va = 0x4d1afff
	       monitored = 1
	     entry_point = 0x4cef53e
	     region_type = mapped_file
	            name = "system.transactions.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll")

Region:
	              id = 1298
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1299
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1300
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1301
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1302
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1303
	        start_va = 0xea0000
	          end_va = 0xeaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ea0000"
	        filename = ""

Region:
	              id = 1304
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1305
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1306
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1307
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1308
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1309
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1310
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1311
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1312
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1313
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1314
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1315
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1316
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1317
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1318
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1319
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1320
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1321
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1322
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1323
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1324
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1325
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1326
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1327
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1328
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1329
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1330
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1331
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1332
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1333
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1334
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1335
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1336
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1337
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1338
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1339
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1340
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1341
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1342
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1343
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1344
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1345
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1346
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1347
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1348
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1349
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1350
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1351
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1352
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1353
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1354
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1355
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1356
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1357
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1358
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1359
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1360
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1361
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1362
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1363
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1364
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1365
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1366
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1367
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1368
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1369
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1370
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1371
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1372
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1373
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1374
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1375
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1376
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1377
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1378
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1379
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1380
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1381
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1382
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1383
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1384
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1385
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1386
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1387
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1388
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1389
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1390
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1391
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1392
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1393
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1394
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1395
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1396
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1397
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1398
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1399
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1400
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1401
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1402
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1403
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1404
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1405
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1406
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1407
	        start_va = 0x1220000
	          end_va = 0x122ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001220000"
	        filename = ""

Region:
	              id = 1408
	        start_va = 0x1220000
	          end_va = 0x122ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001220000"
	        filename = ""

Region:
	              id = 1409
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1410
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1411
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1412
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1413
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1414
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1415
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1416
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1417
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1418
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1419
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1420
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1421
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1422
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1423
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1424
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1425
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1426
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1427
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1428
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1429
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1430
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1431
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1432
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1433
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1434
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1435
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1436
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1437
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1438
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1439
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1440
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1441
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1442
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1443
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1444
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1445
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1446
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1447
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1448
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1449
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1450
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1451
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1452
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1453
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1454
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1455
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1456
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1457
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1458
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1459
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1460
	        start_va = 0xe90000
	          end_va = 0xe9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1461
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1462
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1463
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1464
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1465
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1466
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1467
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1468
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1469
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1470
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1471
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1472
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1473
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1474
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1475
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1476
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1477
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1478
	        start_va = 0x1220000
	          end_va = 0x122ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001220000"
	        filename = ""

Region:
	              id = 1479
	        start_va = 0x1220000
	          end_va = 0x122ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001220000"
	        filename = ""

Region:
	              id = 1480
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1481
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1482
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1483
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1484
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1485
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1486
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1487
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1488
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1489
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1490
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1491
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1492
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1493
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1494
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1495
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1496
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1497
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1498
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1499
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1500
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1501
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1502
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1503
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1504
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1505
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1506
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1507
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1508
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1509
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1510
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1511
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1512
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1513
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1514
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1515
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1516
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1517
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1518
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1519
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1520
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1521
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1522
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1523
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1524
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1525
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1526
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1527
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1528
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1529
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1530
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1531
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1532
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1533
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1534
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1535
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1536
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1537
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1538
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1539
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1540
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1541
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1542
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1543
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1544
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1545
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1546
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1547
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1548
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1549
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1550
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1551
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1552
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1553
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1554
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1555
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1556
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1557
	        start_va = 0x1220000
	          end_va = 0x122ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001220000"
	        filename = ""

Region:
	              id = 1558
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1559
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1560
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1561
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1562
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1563
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1564
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1565
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1566
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1567
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1568
	        start_va = 0xeb0000
	          end_va = 0xebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 1569
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1570
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1571
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1572
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1573
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1574
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1575
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1576
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1577
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1578
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1579
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1580
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1581
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1582
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1583
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1584
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1585
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1586
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1587
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1588
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1589
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1590
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1591
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1592
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1593
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1594
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1595
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1596
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1597
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1598
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1599
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1600
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1601
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1602
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1603
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1604
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1605
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1606
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1607
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1608
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1609
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1610
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1611
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1612
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1613
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1614
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1615
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1616
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1617
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1618
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1619
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1620
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1621
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1622
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1623
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1624
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1625
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1626
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1627
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1628
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1629
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1630
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1631
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1632
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1633
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1634
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1635
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1636
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1637
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1638
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1639
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1640
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1641
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1642
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1643
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1644
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1645
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1646
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1647
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1648
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1649
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1650
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1651
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1652
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1653
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1654
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1655
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1656
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1657
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1658
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1659
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1660
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1661
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1662
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1663
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1664
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1665
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1666
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1667
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1668
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1669
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1670
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1671
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1672
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1673
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1674
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1675
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1676
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1677
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1678
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1679
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1680
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1681
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1682
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1683
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1684
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1685
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1686
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1687
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1688
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1689
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1690
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1691
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1692
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1693
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1694
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1695
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1696
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1697
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1698
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1699
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1700
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1701
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1702
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1703
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1704
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1705
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1706
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1707
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1708
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1709
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1710
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1711
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1712
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1713
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1714
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1715
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1716
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1717
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1718
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1719
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1720
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1721
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1722
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1723
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1724
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1725
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1726
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1727
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1728
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1729
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1730
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1731
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1732
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1733
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1734
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1735
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1736
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1737
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1738
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1739
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1740
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1741
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1742
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1743
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1744
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1745
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1746
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1747
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1748
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1749
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1750
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1751
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1752
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1753
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1754
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1755
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1756
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1757
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1758
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1759
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1760
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1761
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1762
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1763
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1764
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1765
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1766
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1767
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1768
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1769
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1770
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1771
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1772
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1773
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1774
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1775
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1776
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1777
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1778
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1779
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1780
	        start_va = 0x1230000
	          end_va = 0x123ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001230000"
	        filename = ""

Region:
	              id = 1781
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1782
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1783
	        start_va = 0x1210000
	          end_va = 0x121ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 1784
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1785
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1786
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1787
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1788
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1789
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1790
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1791
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1792
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1793
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1794
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1795
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1796
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1797
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1798
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1799
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1800
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1801
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1802
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1803
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1804
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1805
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1806
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1807
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1808
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1809
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1810
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1811
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1812
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1813
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1814
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1815
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1816
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1817
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1818
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1819
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1820
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1821
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1822
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1823
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1824
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1825
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1826
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1827
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1828
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1829
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1830
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1831
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1832
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1833
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1834
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1835
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1836
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1837
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1838
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1839
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1840
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1841
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1842
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1843
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1844
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1845
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1846
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1847
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1848
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1849
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1850
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1851
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1852
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1853
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1854
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1855
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1856
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1857
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1858
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1859
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1860
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1861
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1862
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1863
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1864
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1865
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1866
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1867
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1868
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1869
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1870
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1871
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1878
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1879
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1880
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1881
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1882
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1883
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1884
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1885
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1886
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1887
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1888
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1889
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1890
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1891
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1892
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1893
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1894
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1895
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1896
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1897
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1898
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1899
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1900
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1901
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1902
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1903
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1904
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1905
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1906
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1907
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1908
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1909
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1910
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1911
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1912
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1913
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1914
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1915
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1916
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1917
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1918
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1919
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1920
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1921
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1922
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1923
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1924
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1925
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1926
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1927
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1928
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1929
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1930
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1931
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1932
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1933
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1934
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1935
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1936
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1937
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1938
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1939
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1940
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1941
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1942
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1943
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1944
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1945
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1946
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1947
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1948
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1949
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1950
	        start_va = 0x4cd0000
	          end_va = 0x4cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cd0000"
	        filename = ""

Region:
	              id = 1951
	        start_va = 0x4ce0000
	          end_va = 0x4ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ce0000"
	        filename = ""

Region:
	              id = 1952
	        start_va = 0x4cf0000
	          end_va = 0x4cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cf0000"
	        filename = ""

Region:
	              id = 1953
	        start_va = 0x4d00000
	          end_va = 0x4d0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d00000"
	        filename = ""

Region:
	              id = 1954
	        start_va = 0x4d10000
	          end_va = 0x4d1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d10000"
	        filename = ""

Region:
	              id = 1955
	        start_va = 0x4d20000
	          end_va = 0x4d2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d20000"
	        filename = ""

Region:
	              id = 1956
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 1957
	        start_va = 0x4d40000
	          end_va = 0x4d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d40000"
	        filename = ""

Region:
	              id = 1958
	        start_va = 0x4d50000
	          end_va = 0x4d5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d50000"
	        filename = ""

Region:
	              id = 1959
	        start_va = 0x4d60000
	          end_va = 0x4d6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d60000"
	        filename = ""

Region:
	              id = 1961
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1962
	        start_va = 0x4cd0000
	          end_va = 0x4d0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cd0000"
	        filename = ""

Region:
	              id = 1963
	        start_va = 0x4d70000
	          end_va = 0x4e6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d70000"
	        filename = ""

Region:
	              id = 1964
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1965
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1966
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1967
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1968
	        start_va = 0x1290000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001290000"
	        filename = ""

Region:
	              id = 1969
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1970
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1971
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1972
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1973
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1974
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1975
	        start_va = 0x4d10000
	          end_va = 0x4d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d10000"
	        filename = ""

Region:
	              id = 1976
	        start_va = 0x4e70000
	          end_va = 0x4f6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e70000"
	        filename = ""

Region:
	              id = 1977
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1978
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1979
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1980
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1981
	        start_va = 0x50ea0000
	          end_va = 0x50fa3fff
	       monitored = 1
	     entry_point = 0x50f9f3aa
	     region_type = mapped_file
	            name = "system.identitymodel.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.identitymodel.dll")

Region:
	              id = 1982
	        start_va = 0x4f70000
	          end_va = 0x5073fff
	       monitored = 1
	     entry_point = 0x506f3aa
	     region_type = mapped_file
	            name = "system.identitymodel.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.identitymodel.dll")

Region:
	              id = 1983
	        start_va = 0x12a0000
	          end_va = 0x12affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 1984
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1985
	        start_va = 0x4d50000
	          end_va = 0x4d5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d50000"
	        filename = ""

Region:
	              id = 1986
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1987
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1988
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1989
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1990
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1991
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1992
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1993
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1994
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1995
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1996
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1997
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1998
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 1999
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2000
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2001
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2002
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2003
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2004
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2005
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2006
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2007
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2008
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2009
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2010
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2011
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2012
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2013
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2014
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2015
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2016
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2017
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2018
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2019
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2020
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2021
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2022
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2023
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2024
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2025
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2026
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2027
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2028
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2029
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2030
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2031
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2032
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2033
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2034
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2035
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2036
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2037
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2038
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2039
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2040
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2041
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2042
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2043
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2044
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2045
	        start_va = 0xffe60000
	          end_va = 0xffeaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000ffe60000"
	        filename = ""

Region:
	              id = 2046
	        start_va = 0xffe50000
	          end_va = 0xffe5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000ffe50000"
	        filename = ""

Region:
	              id = 2047
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2048
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2049
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2050
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2051
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2052
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2053
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2054
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2055
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2056
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2057
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2058
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2059
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2060
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2061
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2062
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2063
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2064
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2065
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2066
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2067
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2068
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2069
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2070
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2071
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2072
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2073
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2074
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2075
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2076
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2077
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2078
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2079
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2080
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2081
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2082
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2083
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2084
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2085
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2086
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2087
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2088
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2089
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2090
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2091
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2092
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2093
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2094
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2095
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2096
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2097
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2098
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2099
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2100
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2101
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2102
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2103
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2104
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2105
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2106
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2107
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2108
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2109
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2110
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2111
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2112
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2113
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2114
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2115
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2116
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2117
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2118
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2119
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2120
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2121
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2122
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2123
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2124
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2125
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2126
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2127
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2128
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2129
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2130
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2131
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2132
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2133
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2134
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2135
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2136
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2137
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2138
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2139
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2140
	        start_va = 0x5090000
	          end_va = 0x509ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005090000"
	        filename = ""

Region:
	              id = 2141
	        start_va = 0x5090000
	          end_va = 0x509ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005090000"
	        filename = ""

Region:
	              id = 2142
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2143
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2144
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2145
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2146
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2147
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2148
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2149
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2150
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2151
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2152
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2153
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2154
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2155
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2156
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2157
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2158
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2159
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2160
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2161
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2162
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2163
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2164
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2165
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2166
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2167
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2168
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2169
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2170
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2171
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2172
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2173
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2174
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2175
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2176
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2177
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2178
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2179
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2180
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2181
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2182
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2183
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2184
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2185
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2186
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2187
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2188
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2189
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2190
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2191
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2192
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2193
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2194
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2195
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2196
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2197
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2198
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2199
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2200
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2201
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2202
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2203
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2204
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2205
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2206
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2207
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2208
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2209
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2210
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2211
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2212
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2213
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2214
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2215
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2216
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2217
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2218
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2219
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2220
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2221
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2222
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2223
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2224
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2225
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2226
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2227
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2228
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2229
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2230
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2231
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2232
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2233
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2234
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2235
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2236
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2237
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2238
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2239
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2240
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2241
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2242
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2243
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2244
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2245
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2246
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2247
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2248
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2249
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2250
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2251
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2252
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2253
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2254
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2255
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2256
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2257
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2258
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2259
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2260
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2261
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2262
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2263
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2264
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2265
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2266
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2267
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2268
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2269
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2270
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2271
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2272
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2273
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2274
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2275
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2276
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2277
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2278
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2279
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2280
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 2281
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2282
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2283
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2284
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2285
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2286
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2287
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2288
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2289
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2290
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2291
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2292
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2293
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2294
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2295
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2296
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2297
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2298
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2299
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2300
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2301
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2302
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2303
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2304
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2305
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2306
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2307
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2308
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2309
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2310
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2311
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2312
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2313
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2314
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2315
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2316
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2317
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2318
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2319
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2320
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2321
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2322
	        start_va = 0x12b0000
	          end_va = 0x12bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2323
	        start_va = 0x69240000
	          end_va = 0x692e4fff
	       monitored = 0
	     entry_point = 0x6925ac50
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll")

Region:
	              id = 2324
	        start_va = 0x68760000
	          end_va = 0x68782fff
	       monitored = 0
	     entry_point = 0x68765570
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll")

Region:
	              id = 2325
	        start_va = 0x6cce0000
	          end_va = 0x6cceffff
	       monitored = 0
	     entry_point = 0x6cce3820
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll")

Region:
	              id = 2326
	        start_va = 0x75e90000
	          end_va = 0x75eeefff
	       monitored = 0
	     entry_point = 0x75e94af0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 2327
	        start_va = 0x71a70000
	          end_va = 0x71abefff
	       monitored = 0
	     entry_point = 0x71a7d850
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 2328
	        start_va = 0x12b0000
	          end_va = 0x12b1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000012b0000"
	        filename = ""

Region:
	              id = 2329
	        start_va = 0x5080000
	          end_va = 0x5080fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005080000"
	        filename = ""

Region:
	              id = 2330
	        start_va = 0x5090000
	          end_va = 0x516ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 2331
	        start_va = 0x5170000
	          end_va = 0x51affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005170000"
	        filename = ""

Region:
	              id = 2332
	        start_va = 0x51b0000
	          end_va = 0x52affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051b0000"
	        filename = ""

Region:
	              id = 2333
	        start_va = 0x700d0000
	          end_va = 0x7016afff
	       monitored = 0
	     entry_point = 0x7010f7e0
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll")

Region:
	              id = 2334
	        start_va = 0x70170000
	          end_va = 0x70181fff
	       monitored = 0
	     entry_point = 0x70174510
	     region_type = mapped_file
	            name = "ondemandconnroutehelper.dll"
	        filename = "\\Windows\\SysWOW64\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\syswow64\\ondemandconnroutehelper.dll")

Region:
	              id = 2335
	        start_va = 0x71970000
	          end_va = 0x7199efff
	       monitored = 0
	     entry_point = 0x7197bb70
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 2336
	        start_va = 0x74610000
	          end_va = 0x74616fff
	       monitored = 0
	     entry_point = 0x74611e10
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 2337
	        start_va = 0x718f0000
	          end_va = 0x71902fff
	       monitored = 0
	     entry_point = 0x718f25d0
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll")

Region:
	              id = 2338
	        start_va = 0x718d0000
	          end_va = 0x718e3fff
	       monitored = 0
	     entry_point = 0x718d3c10
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll")

Region:
	              id = 2341
	        start_va = 0x52b0000
	          end_va = 0x52bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000052b0000"
	        filename = ""

Region:
	              id = 2342
	        start_va = 0x74a90000
	          end_va = 0x75e8efff
	       monitored = 0
	     entry_point = 0x74c4b990
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 2343
	        start_va = 0x76fb0000
	          end_va = 0x76fe6fff
	       monitored = 0
	     entry_point = 0x76fb3b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 2344
	        start_va = 0x764b0000
	          end_va = 0x769a8fff
	       monitored = 0
	     entry_point = 0x766b7610
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll")

Region:
	              id = 2345
	        start_va = 0x77180000
	          end_va = 0x7720cfff
	       monitored = 0
	     entry_point = 0x771c9b90
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll")

Region:
	              id = 2346
	        start_va = 0x77210000
	          end_va = 0x77253fff
	       monitored = 0
	     entry_point = 0x77217410
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll")

Region:
	              id = 2347
	        start_va = 0x75f50000
	          end_va = 0x75f5efff
	       monitored = 0
	     entry_point = 0x75f52e40
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 2348
	        start_va = 0x52b0000
	          end_va = 0x52b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000052b0000"
	        filename = ""

Region:
	              id = 2349
	        start_va = 0x52c0000
	          end_va = 0x52c0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 2350
	        start_va = 0x52c0000
	          end_va = 0x52c8fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 2351
	        start_va = 0x52c0000
	          end_va = 0x52c0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 2352
	        start_va = 0x52c0000
	          end_va = 0x52c8fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 2353
	        start_va = 0x52c0000
	          end_va = 0x52c0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 2354
	        start_va = 0x52c0000
	          end_va = 0x52c8fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 2355
	        start_va = 0x52c0000
	          end_va = 0x52fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000052c0000"
	        filename = ""

Region:
	              id = 2356
	        start_va = 0x5300000
	          end_va = 0x53fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005300000"
	        filename = ""

Region:
	              id = 2357
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2358
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2359
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2360
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2361
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2362
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2363
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2364
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2365
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2366
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2367
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2368
	        start_va = 0x5410000
	          end_va = 0x541ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005410000"
	        filename = ""

Region:
	              id = 2369
	        start_va = 0x5410000
	          end_va = 0x541ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005410000"
	        filename = ""

Region:
	              id = 2370
	        start_va = 0x5410000
	          end_va = 0x541ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005410000"
	        filename = ""

Region:
	              id = 2371
	        start_va = 0x5410000
	          end_va = 0x541ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005410000"
	        filename = ""

Region:
	              id = 2372
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2373
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2374
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2375
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2376
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2377
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2378
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2379
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2380
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2381
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2382
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2383
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2384
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2385
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2386
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2387
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2388
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2389
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2390
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2391
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2392
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2393
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2394
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2395
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2396
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2397
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2398
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2399
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2400
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2401
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2402
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2403
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2404
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2405
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2406
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2407
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2408
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2409
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2410
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2411
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2412
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2413
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2414
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2415
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2416
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2417
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2418
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2419
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2420
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2421
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2422
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2423
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2424
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2425
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2426
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2427
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2428
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2429
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005400000"
	        filename = ""

Region:
	              id = 2430
	        start_va = 0x5400000
	          end_va = 0x5410fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005400000"
	        filename = ""

Region:
	              id = 2431
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2432
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2433
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2434
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2435
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2436
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2437
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2438
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2439
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2440
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2441
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2442
	        start_va = 0x5420000
	          end_va = 0x542ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2443
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2444
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2445
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2446
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2447
	        start_va = 0x686d0000
	          end_va = 0x68750fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.net.http.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Net.Http\\b0e2c2745901c5cad270817cb833bc54\\System.Net.Http.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.net.http\\b0e2c2745901c5cad270817cb833bc54\\system.net.http.ni.dll")

Region:
	              id = 2448
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2449
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2450
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2451
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2452
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2453
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2454
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2455
	        start_va = 0x5440000
	          end_va = 0x544ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005440000"
	        filename = ""

Region:
	              id = 2457
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2458
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2459
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2460
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2461
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2462
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2463
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2464
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2465
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2466
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2467
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2468
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2469
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2470
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2471
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2472
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2473
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2474
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2475
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2476
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2477
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2478
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2479
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2480
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2481
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2482
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2483
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2484
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2485
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2486
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2487
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2488
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2489
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2490
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2491
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2492
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2493
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2494
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2495
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2496
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2497
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2498
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2499
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2500
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2501
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2502
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2503
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2504
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2505
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2506
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2507
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2508
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2509
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2510
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2511
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2512
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2513
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2514
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2515
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2516
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2517
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2518
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2519
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2520
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2521
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2522
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2523
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2524
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2525
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2526
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2527
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2528
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2529
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2530
	        start_va = 0x5460000
	          end_va = 0x546ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005460000"
	        filename = ""

Region:
	              id = 2531
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2532
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2533
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2534
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2535
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2536
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2537
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2538
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2539
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2540
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2541
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2542
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2543
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2544
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2545
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2546
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2547
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2548
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2549
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2550
	        start_va = 0x5430000
	          end_va = 0x543ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005430000"
	        filename = ""

Region:
	              id = 2551
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2552
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2553
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2554
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2555
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2556
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2557
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2558
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2559
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2560
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2561
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2562
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2563
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2564
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2565
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2566
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2567
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2568
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2569
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2570
	        start_va = 0x5460000
	          end_va = 0x546ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005460000"
	        filename = ""

Region:
	              id = 2571
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2572
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2573
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2574
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2575
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2576
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2577
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2578
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2579
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2580
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2581
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2582
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2583
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2584
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2585
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2586
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2587
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2588
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2589
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2590
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2591
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2592
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2593
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2594
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2595
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2596
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2597
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2599
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2600
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2601
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2602
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2603
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2606
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2607
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2608
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2609
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2610
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2611
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2612
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2613
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2614
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2615
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2616
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2617
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2618
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2619
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2620
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2621
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2622
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2623
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2624
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2625
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2657
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2658
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2659
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2660
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2661
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2662
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2663
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2664
	        start_va = 0x5460000
	          end_va = 0x546ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005460000"
	        filename = ""

Region:
	              id = 2665
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2666
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2667
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2668
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2669
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2670
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2671
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2672
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2673
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2674
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2675
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2676
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2677
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2678
	        start_va = 0x5460000
	          end_va = 0x546ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005460000"
	        filename = ""

Region:
	              id = 2679
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2680
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2681
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2682
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2683
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2684
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2685
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2686
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2687
	        start_va = 0x5460000
	          end_va = 0x546ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005460000"
	        filename = ""

Region:
	              id = 2688
	        start_va = 0x5460000
	          end_va = 0x546ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005460000"
	        filename = ""

Region:
	              id = 2689
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2690
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2691
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2692
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2693
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2694
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2695
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2696
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2697
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2698
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2699
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2700
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2701
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2702
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2703
	        start_va = 0x5460000
	          end_va = 0x546ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005460000"
	        filename = ""

Region:
	              id = 2704
	        start_va = 0x5470000
	          end_va = 0x547ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005470000"
	        filename = ""

Region:
	              id = 2705
	        start_va = 0x5480000
	          end_va = 0x548ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005480000"
	        filename = ""

Region:
	              id = 2706
	        start_va = 0x5490000
	          end_va = 0x549ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005490000"
	        filename = ""

Region:
	              id = 2707
	        start_va = 0x54a0000
	          end_va = 0x54affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000054a0000"
	        filename = ""

Region:
	              id = 2708
	        start_va = 0x54b0000
	          end_va = 0x54bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000054b0000"
	        filename = ""

Region:
	              id = 2709
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2710
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2711
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2712
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2713
	        start_va = 0x5450000
	          end_va = 0x545ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2714
	        start_va = 0x719a0000
	          end_va = 0x71a23fff
	       monitored = 0
	     entry_point = 0x719c6530
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 2715
	        start_va = 0x700c0000
	          end_va = 0x700c7fff
	       monitored = 0
	     entry_point = 0x700c1fc0
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 2716
	        start_va = 0x71960000
	          end_va = 0x71967fff
	       monitored = 0
	     entry_point = 0x71961920
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 2717
	        start_va = 0x71910000
	          end_va = 0x71956fff
	       monitored = 0
	     entry_point = 0x719258d0
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 2718
	        start_va = 0x6c400000
	          end_va = 0x6c409fff
	       monitored = 0
	     entry_point = 0x6c403200
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll")

Region:
	              id = 2719
	        start_va = 0x6fef0000
	          end_va = 0x6ff53fff
	       monitored = 0
	     entry_point = 0x6ff0afd0
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\SysWOW64\\schannel.dll" (normalized: "c:\\windows\\syswow64\\schannel.dll")

Region:
	              id = 2720
	        start_va = 0x76160000
	          end_va = 0x762d7fff
	       monitored = 0
	     entry_point = 0x761b8a90
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 2721
	        start_va = 0x76c10000
	          end_va = 0x76c1dfff
	       monitored = 0
	     entry_point = 0x76c15410
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 2722
	        start_va = 0x6fee0000
	          end_va = 0x6feeffff
	       monitored = 0
	     entry_point = 0x6fee4600
	     region_type = mapped_file
	            name = "mskeyprotect.dll"
	        filename = "\\Windows\\SysWOW64\\mskeyprotect.dll" (normalized: "c:\\windows\\syswow64\\mskeyprotect.dll")

Region:
	              id = 2723
	        start_va = 0x6fec0000
	          end_va = 0x6fedffff
	       monitored = 0
	     entry_point = 0x6fecd120
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll")

Region:
	              id = 2724
	        start_va = 0x6fe90000
	          end_va = 0x6febbfff
	       monitored = 0
	     entry_point = 0x6feabb10
	     region_type = mapped_file
	            name = "ntasn1.dll"
	        filename = "\\Windows\\SysWOW64\\ntasn1.dll" (normalized: "c:\\windows\\syswow64\\ntasn1.dll")

Region:
	              id = 2725
	        start_va = 0x6fe70000
	          end_va = 0x6fe89fff
	       monitored = 0
	     entry_point = 0x6fe7fa70
	     region_type = mapped_file
	            name = "ncryptsslp.dll"
	        filename = "\\Windows\\SysWOW64\\ncryptsslp.dll" (normalized: "c:\\windows\\syswow64\\ncryptsslp.dll")

Region:
	              id = 2726
	        start_va = 0x5450000
	          end_va = 0x548ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005450000"
	        filename = ""

Region:
	              id = 2727
	        start_va = 0x54c0000
	          end_va = 0x55bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000054c0000"
	        filename = ""

Region:
	              id = 2728
	        start_va = 0x5490000
	          end_va = 0x5493fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005490000"
	        filename = ""

Region:
	              id = 2729
	        start_va = 0x642c0000
	          end_va = 0x64481fff
	       monitored = 1
	     entry_point = 0x644791de
	     region_type = mapped_file
	            name = "system.web.extensions.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Web.Extensions\\v4.0_4.0.0.0__31bf3856ad364e35\\System.Web.Extensions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.web.extensions\\v4.0_4.0.0.0__31bf3856ad364e35\\system.web.extensions.dll")

Region:
	              id = 2730
	        start_va = 0x55c0000
	          end_va = 0x5781fff
	       monitored = 1
	     entry_point = 0x57791de
	     region_type = mapped_file
	            name = "system.web.extensions.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Web.Extensions\\v4.0_4.0.0.0__31bf3856ad364e35\\System.Web.Extensions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.web.extensions\\v4.0_4.0.0.0__31bf3856ad364e35\\system.web.extensions.dll")

Region:
	              id = 2731
	        start_va = 0x54a0000
	          end_va = 0x54affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000054a0000"
	        filename = ""

Region:
	              id = 2732
	        start_va = 0x5790000
	          end_va = 0x579ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005790000"
	        filename = ""

Region:
	              id = 2733
	        start_va = 0x57a0000
	          end_va = 0x57affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000057a0000"
	        filename = ""

Region:
	              id = 2734
	        start_va = 0x57b0000
	          end_va = 0x57bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000057b0000"
	        filename = ""

Region:
	              id = 2735
	        start_va = 0x679e0000
	          end_va = 0x686cbfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.web.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Web\\b0a0293471d69f9debea2cf12d9fef3e\\System.Web.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.web\\b0a0293471d69f9debea2cf12d9fef3e\\system.web.ni.dll")

Region:
	              id = 2736
	        start_va = 0x5790000
	          end_va = 0x588ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005790000"
	        filename = ""

Region:
	              id = 2737
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2738
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2739
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2740
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2741
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2742
	        start_va = 0x58a0000
	          end_va = 0x58affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058a0000"
	        filename = ""

Region:
	              id = 2743
	        start_va = 0x58b0000
	          end_va = 0x58bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058b0000"
	        filename = ""

Region:
	              id = 2744
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2745
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2746
	        start_va = 0x58a0000
	          end_va = 0x58affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058a0000"
	        filename = ""

Region:
	              id = 2747
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2748
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2749
	        start_va = 0x58a0000
	          end_va = 0x58affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058a0000"
	        filename = ""

Region:
	              id = 2750
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2751
	        start_va = 0x6ffd0000
	          end_va = 0x6fff7fff
	       monitored = 0
	     entry_point = 0x6ffd7820
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll")

Region:
	              id = 2752
	        start_va = 0x6ccf0000
	          end_va = 0x6cd60fff
	       monitored = 0
	     entry_point = 0x6cd469e0
	     region_type = mapped_file
	            name = "efswrt.dll"
	        filename = "\\Windows\\SysWOW64\\efswrt.dll" (normalized: "c:\\windows\\syswow64\\efswrt.dll")

Region:
	              id = 2753
	        start_va = 0x73b60000
	          end_va = 0x73c27fff
	       monitored = 0
	     entry_point = 0x73bcae90
	     region_type = mapped_file
	            name = "wintypes.dll"
	        filename = "\\Windows\\SysWOW64\\WinTypes.dll" (normalized: "c:\\windows\\syswow64\\wintypes.dll")

Region:
	              id = 2754
	        start_va = 0x6cc40000
	          end_va = 0x6cc88fff
	       monitored = 0
	     entry_point = 0x6cc46450
	     region_type = mapped_file
	            name = "edputil.dll"
	        filename = "\\Windows\\SysWOW64\\edputil.dll" (normalized: "c:\\windows\\syswow64\\edputil.dll")

Region:
	              id = 2755
	        start_va = 0x69530000
	          end_va = 0x696b3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "microsoft.csharp.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.CSharp\\4b4bc9f75377aaea11113089f0188e82\\Microsoft.CSharp.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.csharp\\4b4bc9f75377aaea11113089f0188e82\\microsoft.csharp.ni.dll")

Region:
	              id = 2756
	        start_va = 0x67850000
	          end_va = 0x679dcfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.drawing.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\9b645a48c9bcfc95aaadf6a069bb4ebe\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\9b645a48c9bcfc95aaadf6a069bb4ebe\\system.drawing.ni.dll")

Region:
	              id = 2757
	        start_va = 0x66bf0000
	          end_va = 0x67848fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.windows.forms.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\8cd2187094ba6cade0ca0fab4f932654\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\8cd2187094ba6cade0ca0fab4f932654\\system.windows.forms.ni.dll")

Region:
	              id = 2758
	        start_va = 0x5890000
	          end_va = 0x589ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005890000"
	        filename = ""

Region:
	              id = 2759
	        start_va = 0x66a80000
	          end_va = 0x66beafff
	       monitored = 0
	     entry_point = 0x66aee360
	     region_type = mapped_file
	            name = "gdiplus.dll"
	        filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll")

Region:
	              id = 2760
	        start_va = 0x58a0000
	          end_va = 0x5a6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058a0000"
	        filename = ""

Region:
	              id = 2761
	        start_va = 0x70040000
	          end_va = 0x700b4fff
	       monitored = 0
	     entry_point = 0x70079a60
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 2762
	        start_va = 0x58a0000
	          end_va = 0x593ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058a0000"
	        filename = ""

Region:
	              id = 2763
	        start_va = 0x5a60000
	          end_va = 0x5a6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a60000"
	        filename = ""

Region:
	              id = 2764
	        start_va = 0x58a0000
	          end_va = 0x58dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058a0000"
	        filename = ""

Region:
	              id = 2765
	        start_va = 0x5930000
	          end_va = 0x593ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005930000"
	        filename = ""

Region:
	              id = 2766
	        start_va = 0x5940000
	          end_va = 0x5a3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005940000"
	        filename = ""

Region:
	              id = 2767
	        start_va = 0x74120000
	          end_va = 0x7423efff
	       monitored = 0
	     entry_point = 0x74165980
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 2768
	        start_va = 0x58e0000
	          end_va = 0x591ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058e0000"
	        filename = ""

Region:
	              id = 2769
	        start_va = 0x5a70000
	          end_va = 0x5b6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a70000"
	        filename = ""

Region:
	              id = 2770
	        start_va = 0x6cbe0000
	          end_va = 0x6cc3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.dynamic.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dynamic\\f7209dae192c8b5254852d8a975aed4e\\System.Dynamic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.dynamic\\f7209dae192c8b5254852d8a975aed4e\\system.dynamic.ni.dll")

Region:
	              id = 2771
	        start_va = 0x6c2a0000
	          end_va = 0x6c3bbfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.management.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\d2f554a0c84513cd793fdcd77a86dab1\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.management\\d2f554a0c84513cd793fdcd77a86dab1\\system.management.ni.dll")

Region:
	              id = 2772
	        start_va = 0x5b70000
	          end_va = 0x5baffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005b70000"
	        filename = ""

Region:
	              id = 2773
	        start_va = 0x5bb0000
	          end_va = 0x5caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005bb0000"
	        filename = ""

Region:
	              id = 2774
	        start_va = 0x6cbd0000
	          end_va = 0x6cbd9fff
	       monitored = 1
	     entry_point = 0x6cbd39f9
	     region_type = mapped_file
	            name = "wminet_utils.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wminet_utils.dll")

Region:
	              id = 2775
	        start_va = 0x5920000
	          end_va = 0x592ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005920000"
	        filename = ""

Region:
	              id = 2776
	        start_va = 0x5a40000
	          end_va = 0x5a4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a40000"
	        filename = ""

Region:
	              id = 2777
	        start_va = 0x5a40000
	          end_va = 0x5a4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a40000"
	        filename = ""

Region:
	              id = 2778
	        start_va = 0x5a40000
	          end_va = 0x5a4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a40000"
	        filename = ""

Region:
	              id = 2779
	        start_va = 0x5a40000
	          end_va = 0x5a40fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005a40000"
	        filename = ""

Region:
	              id = 2780
	        start_va = 0x74360000
	          end_va = 0x743e3fff
	       monitored = 0
	     entry_point = 0x74386220
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 2781
	        start_va = 0x5a50000
	          end_va = 0x5a50fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005a50000"
	        filename = ""

Region:
	              id = 2782
	        start_va = 0x6cb90000
	          end_va = 0x6cbabfff
	       monitored = 0
	     entry_point = 0x6cb9aa90
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wmiutils.dll")

Region:
	              id = 2783
	        start_va = 0x66a10000
	          end_va = 0x66a76fff
	       monitored = 0
	     entry_point = 0x66a2b610
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll")

Region:
	              id = 2784
	        start_va = 0x6cb80000
	          end_va = 0x6cb8cfff
	       monitored = 0
	     entry_point = 0x6cb83520
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll")

Region:
	              id = 3139
	        start_va = 0x6c280000
	          end_va = 0x6c290fff
	       monitored = 0
	     entry_point = 0x6c288fa0
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll")

Region:
	              id = 3140
	        start_va = 0x66950000
	          end_va = 0x66a0efff
	       monitored = 0
	     entry_point = 0x66981e80
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll")

Region:
	              id = 3586
	        start_va = 0x5cb0000
	          end_va = 0x5cb2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005cb0000"
	        filename = ""

Region:
	              id = 3587
	        start_va = 0x5cb0000
	          end_va = 0x5d79fff
	       monitored = 0
	     entry_point = 0x5cb21f0
	     region_type = mapped_file
	            name = "iexplore.exe"
	        filename = "\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")

Region:
	              id = 3588
	        start_va = 0x5d80000
	          end_va = 0x5d81fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "iexplore.exe.mui"
	        filename = "\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")

Region:
	              id = 3589
	        start_va = 0x5cb0000
	          end_va = 0x5d79fff
	       monitored = 0
	     entry_point = 0x5cb21f0
	     region_type = mapped_file
	            name = "iexplore.exe"
	        filename = "\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")

Region:
	              id = 3590
	        start_va = 0x5d80000
	          end_va = 0x5d81fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "iexplore.exe.mui"
	        filename = "\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")

Region:
	              id = 3591
	        start_va = 0x5cb0000
	          end_va = 0x5cb4fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll"
	        filename = "\\Windows\\SysWOW64\\winnlsres.dll" (normalized: "c:\\windows\\syswow64\\winnlsres.dll")

Region:
	              id = 3592
	        start_va = 0x5cc0000
	          end_va = 0x5ccffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\winnlsres.dll.mui")

Region:
	              id = 3593
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3594
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3595
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3596
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3597
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3598
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3599
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3600
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3601
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3602
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3603
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3604
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3605
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3606
	        start_va = 0x5ce0000
	          end_va = 0x5ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005ce0000"
	        filename = ""

Region:
	              id = 3607
	        start_va = 0x5cd0000
	          end_va = 0x5cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3608
	        start_va = 0x5cd0000
	          end_va = 0x5dcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005cd0000"
	        filename = ""

Region:
	              id = 3681
	        start_va = 0x5dd0000
	          end_va = 0x5ddffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005dd0000"
	        filename = ""

Region:
	              id = 3682
	        start_va = 0x5dd0000
	          end_va = 0x5ddffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005dd0000"
	        filename = ""

Region:
	              id = 3683
	        start_va = 0x5dd0000
	          end_va = 0x5dd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005dd0000"
	        filename = ""

Region:
	              id = 3684
	        start_va = 0x5dd0000
	          end_va = 0x5fcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005dd0000"
	        filename = ""

Region:
	              id = 3685
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3687
	        start_va = 0x5fd0000
	          end_va = 0x5fd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3689
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3690
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3691
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3692
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3693
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3694
	        start_va = 0x5ff0000
	          end_va = 0x5ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005ff0000"
	        filename = ""

Region:
	              id = 3695
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3696
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3697
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3699
	        start_va = 0x5fd0000
	          end_va = 0x5fd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3700
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3701
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3702
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3703
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3704
	        start_va = 0x5ff0000
	          end_va = 0x5ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005ff0000"
	        filename = ""

Region:
	              id = 3705
	        start_va = 0x6000000
	          end_va = 0x600ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006000000"
	        filename = ""

Region:
	              id = 3706
	        start_va = 0x6010000
	          end_va = 0x601ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006010000"
	        filename = ""

Region:
	              id = 3707
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3708
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3709
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3710
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3711
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3712
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3713
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3714
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3715
	        start_va = 0x5fd0000
	          end_va = 0x5fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 3716
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3717
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3718
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3719
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3720
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3721
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3722
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3723
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3724
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3725
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3726
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3727
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3728
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3729
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3730
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3731
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3732
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3733
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3734
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3735
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""

Region:
	              id = 3736
	        start_va = 0x5fe0000
	          end_va = 0x5feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fe0000"
	        filename = ""


Thread:
	id = 3
	os_tid = 0xe64

	[0105.335] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0105.341] RoInitialize () returned 0x1
	[0105.341] RoUninitialize () returned 0x0
	[0108.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x19f450, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32÷\x05e", lpUsedDefaultChar=0x0) returned 8
	[0108.047] LoadLibraryA (lpLibFileName="kernel32") returned 0x74530000
	[0108.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="user32.dll", cchWideChar=10, lpMultiByteStr=0x19f450, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="user32.dlle", lpUsedDefaultChar=0x0) returned 10
	[0108.047] LoadLibraryA (lpLibFileName="user32.dll") returned 0x76300000
	[0108.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetConsoleWindow", cchWideChar=16, lpMultiByteStr=0x19f448, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetConsoleWindow]\x07e", lpUsedDefaultChar=0x0) returned 16
	[0108.060] GetProcAddress (hModule=0x74530000, lpProcName="GetConsoleWindow") returned 0x74596370
	[0108.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ShowWindow", cchWideChar=10, lpMultiByteStr=0x19f450, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ShowWindowe", lpUsedDefaultChar=0x0) returned 10
	[0108.060] GetProcAddress (hModule=0x76300000, lpProcName="ShowWindow") returned 0x76338e60
	[0108.074] GetConsoleWindow () returned 0x602b6
	[0108.112] ShowWindow (hWnd=0x602b6, nCmdShow=0) returned 1
	[0108.975] EtwEventRegister (in: ProviderId=0x26e62e4, EnableCallback=0x12405be, CallbackContext=0x0, RegHandle=0x26e62c0 | out: RegHandle=0x26e62c0) returned 0x0
	[0108.991] EtwEventSetInformation (RegHandle=0x6a0b20, InformationClass=0x1b, EventInformation=0x2, InformationLength=0x26e6254) returned 0x0
	[0120.214] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", nBufferLength=0x105, lpBuffer=0x19e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", lpFilePart=0x0) returned 0x42
	[0120.215] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", nBufferLength=0x105, lpBuffer=0x19e568, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", lpFilePart=0x0) returned 0x42
	[0120.228] GetCurrentProcess () returned 0xffffffff
	[0120.228] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e920 | out: TokenHandle=0x19e920*=0x258) returned 1
	[0120.235] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19e3fc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
	[0120.237] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19e920 | out: lpFileInformation=0x19e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0120.240] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e3c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0120.242] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19e920 | out: lpFileInformation=0x19e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0120.243] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e358, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0120.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e84c) returned 1
	[0120.244] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x280
	[0120.290] GetFileType (hFile=0x280) returned 0x1
	[0120.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e848) returned 1
	[0120.290] GetFileType (hFile=0x280) returned 0x1
	[0120.362] GetFileSize (in: hFile=0x280, lpFileSizeHigh=0x19e914 | out: lpFileSizeHigh=0x19e914*=0x0) returned 0x8c8f
	[0120.365] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e8d0, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e8d0*=0x1000, lpOverlapped=0x0) returned 1
	[0120.444] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e76c, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e76c*=0x1000, lpOverlapped=0x0) returned 1
	[0120.449] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e620, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e620*=0x1000, lpOverlapped=0x0) returned 1
	[0120.450] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e620, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e620*=0x1000, lpOverlapped=0x0) returned 1
	[0120.451] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e620, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e620*=0x1000, lpOverlapped=0x0) returned 1
	[0120.451] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e558, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e558*=0x1000, lpOverlapped=0x0) returned 1
	[0120.455] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e6d4, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e6d4*=0x1000, lpOverlapped=0x0) returned 1
	[0120.456] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e5e8, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e5e8*=0x1000, lpOverlapped=0x0) returned 1
	[0120.456] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e5e8, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e5e8*=0xc8f, lpOverlapped=0x0) returned 1
	[0120.456] ReadFile (in: hFile=0x280, lpBuffer=0x26f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e6a8, lpOverlapped=0x0 | out: lpBuffer=0x26f6f04*, lpNumberOfBytesRead=0x19e6a8*=0x0, lpOverlapped=0x0) returned 1
	[0120.457] CloseHandle (hObject=0x280) returned 1
	[0120.458] GetCurrentProcess () returned 0xffffffff
	[0120.458] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea48 | out: TokenHandle=0x19ea48*=0x280) returned 1
	[0120.458] GetCurrentProcess () returned 0xffffffff
	[0120.458] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea48 | out: TokenHandle=0x19ea48*=0x284) returned 1
	[0120.458] GetCurrentProcess () returned 0xffffffff
	[0120.459] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e920 | out: TokenHandle=0x19e920*=0x288) returned 1
	[0120.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19e920 | out: lpFileInformation=0x19e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ebcd76, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97a89f7e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97a89f7e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0120.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", nBufferLength=0x105, lpBuffer=0x19e3c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", lpFilePart=0x0) returned 0x42
	[0120.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19e920 | out: lpFileInformation=0x19e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ebcd76, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97a89f7e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97a89f7e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0120.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", nBufferLength=0x105, lpBuffer=0x19e358, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", lpFilePart=0x0) returned 0x42
	[0120.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e84c) returned 1
	[0120.459] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x28c
	[0120.460] GetFileType (hFile=0x28c) returned 0x1
	[0120.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e848) returned 1
	[0120.460] GetFileType (hFile=0x28c) returned 0x1
	[0120.460] GetFileSize (in: hFile=0x28c, lpFileSizeHigh=0x19e914 | out: lpFileSizeHigh=0x19e914*=0x0) returned 0x119
	[0120.460] ReadFile (in: hFile=0x28c, lpBuffer=0x270f228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e8d0, lpOverlapped=0x0 | out: lpBuffer=0x270f228*, lpNumberOfBytesRead=0x19e8d0*=0x119, lpOverlapped=0x0) returned 1
	[0120.460] ReadFile (in: hFile=0x28c, lpBuffer=0x270f228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e794, lpOverlapped=0x0 | out: lpBuffer=0x270f228*, lpNumberOfBytesRead=0x19e794*=0x0, lpOverlapped=0x0) returned 1
	[0120.461] CloseHandle (hObject=0x28c) returned 1
	[0120.461] GetCurrentProcess () returned 0xffffffff
	[0120.461] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea48 | out: TokenHandle=0x19ea48*=0x28c) returned 1
	[0120.461] GetCurrentProcess () returned 0xffffffff
	[0120.461] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea48 | out: TokenHandle=0x19ea48*=0x290) returned 1
	[0120.543] GetCurrentProcess () returned 0xffffffff
	[0120.543] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e80c | out: TokenHandle=0x19e80c*=0x294) returned 1
	[0120.661] GetCurrentProcess () returned 0xffffffff
	[0120.661] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e820 | out: TokenHandle=0x19e820*=0x298) returned 1
	[0120.798] GetCurrentProcess () returned 0xffffffff
	[0120.798] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e038 | out: TokenHandle=0x19e038*=0x29c) returned 1
	[0120.819] GetCurrentProcess () returned 0xffffffff
	[0120.819] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e04c | out: TokenHandle=0x19e04c*=0x2a0) returned 1
	[0123.206] GetCurrentProcess () returned 0xffffffff
	[0123.207] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ef20 | out: TokenHandle=0x19ef20*=0x2a4) returned 1
	[0123.227] GetCurrentProcess () returned 0xffffffff
	[0123.227] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ef34 | out: TokenHandle=0x19ef34*=0x2a8) returned 1
	[0124.116] GetCurrentPackageId () returned 0x3d54
	[0127.874] GetCurrentProcess () returned 0xffffffff
	[0127.874] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ed1c | out: TokenHandle=0x19ed1c*=0x2ac) returned 1
	[0127.875] GetCurrentProcess () returned 0xffffffff
	[0127.875] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ed30 | out: TokenHandle=0x19ed30*=0x2b0) returned 1
	[0128.020] EtwEventRegister (in: ProviderId=0x27368d8, EnableCallback=0x12405e6, CallbackContext=0x0, RegHandle=0x27368b4 | out: RegHandle=0x27368b4) returned 0x0
	[0139.815] GetCurrentProcess () returned 0xffffffff
	[0139.815] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19eda8 | out: TokenHandle=0x19eda8*=0x20c) returned 1
	[0139.819] GetCurrentProcess () returned 0xffffffff
	[0139.819] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19edbc | out: TokenHandle=0x19edbc*=0x2c0) returned 1
	[0141.377] CoCreateGuid (in: pguid=0x19f04c | out: pguid=0x19f04c*(Data1=0x8467bc19, Data2=0x95d6, Data3=0x4114, Data4=([0]=0xb0, [1]=0x9a, [2]=0x9f, [3]=0x2, [4]=0xcb, [5]=0x93, [6]=0xf1, [7]=0xab))) returned 0x0
	[0142.604] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2c8
	[0142.604] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x2d0
	[0142.608] GetCurrentProcess () returned 0xffffffff
	[0142.608] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e9d0 | out: TokenHandle=0x19e9d0*=0x2d4) returned 1
	[0142.610] GetCurrentProcess () returned 0xffffffff
	[0142.610] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e9e4 | out: TokenHandle=0x19e9e4*=0x2d8) returned 1
	[0142.614] QueryPerformanceFrequency (in: lpFrequency=0x555e08 | out: lpFrequency=0x555e08*=100000000) returned 1
	[0142.615] QueryPerformanceCounter (in: lpPerformanceCount=0x19edec | out: lpPerformanceCount=0x19edec*=1854029665005) returned 1
	[0142.632] GetCurrentProcess () returned 0xffffffff
	[0142.632] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e9b4 | out: TokenHandle=0x19e9b4*=0x2dc) returned 1
	[0142.634] GetCurrentProcess () returned 0xffffffff
	[0142.634] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e9c8 | out: TokenHandle=0x19e9c8*=0x2e0) returned 1
	[0142.639] GetCurrentProcess () returned 0xffffffff
	[0142.639] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ecd4 | out: TokenHandle=0x19ecd4*=0x2e4) returned 1
	[0142.649] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19de1c | out: phkResult=0x19de1c*=0x2e8) returned 0x0
	[0142.650] RegQueryValueExW (in: hKey=0x2e8, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19de3c, lpData=0x0, lpcbData=0x19de38*=0x0 | out: lpType=0x19de3c*=0x1, lpData=0x0, lpcbData=0x19de38*=0xe) returned 0x0
	[0142.651] RegQueryValueExW (in: hKey=0x2e8, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19de3c, lpData=0x2742560, lpcbData=0x19de38*=0xe | out: lpType=0x19de3c*=0x1, lpData="Client", lpcbData=0x19de38*=0xe) returned 0x0
	[0142.651] RegCloseKey (hKey=0x2e8) returned 0x0
	[0143.244] CoTaskMemAlloc (cb=0xcc0) returned 0x73ebd8
	[0143.245] RasEnumConnectionsW (in: param_1=0x73ebd8, param_2=0x19ece4, param_3=0x19ece8 | out: param_1=0x73ebd8, param_2=0x19ece4, param_3=0x19ece8) returned 0x0
	[0143.452] CoTaskMemFree (pv=0x73ebd8) 
	[0143.755] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19eacc | out: lpWSAData=0x19eacc) returned 0
	[0143.765] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x348
	[0144.063] setsockopt (s=0x348, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0144.063] closesocket (s=0x348) returned 0
	[0144.064] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x348
	[0144.065] setsockopt (s=0x348, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0144.065] closesocket (s=0x348) returned 0
	[0144.065] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x348
	[0144.066] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x34c
	[0144.067] ioctlsocket (in: s=0x348, cmd=-2147195266, argp=0x19ecec | out: argp=0x19ecec) returned 0
	[0144.067] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x350
	[0144.068] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x354
	[0144.068] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x19ecec | out: argp=0x19ecec) returned 0
	[0144.069] WSAIoctl (in: s=0x348, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19ecd4, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19ecd4, lpOverlapped=0x0) returned -1
	[0144.072] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19ea04, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0144.084] WSAEventSelect (s=0x348, hEventObject=0x34c, lNetworkEvents=512) returned 0
	[0144.084] WSAIoctl (in: s=0x350, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19ecd4, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19ecd4, lpOverlapped=0x0) returned -1
	[0144.084] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19ea04, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0144.084] WSAEventSelect (s=0x350, hEventObject=0x354, lNetworkEvents=512) returned 0
	[0144.084] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x35c
	[0144.085] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x35c, param_3=0x3) returned 0x0
	[0144.091] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x19ed00 | out: phkResult=0x19ed00*=0x374) returned 0x0
	[0144.091] RegOpenKeyExW (in: hKey=0x374, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ecb0 | out: phkResult=0x19ecb0*=0x378) returned 0x0
	[0144.091] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x37c
	[0144.092] RegNotifyChangeKeyValue (hKey=0x378, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x37c, fAsynchronous=1) returned 0x0
	[0144.092] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ecb4 | out: phkResult=0x19ecb4*=0x380) returned 0x0
	[0144.092] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x384
	[0144.093] RegNotifyChangeKeyValue (hKey=0x380, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x384, fAsynchronous=1) returned 0x0
	[0144.093] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ecb4 | out: phkResult=0x19ecb4*=0x388) returned 0x0
	[0144.093] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x38c
	[0144.093] RegNotifyChangeKeyValue (hKey=0x388, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x38c, fAsynchronous=1) returned 0x0
	[0144.093] GetCurrentProcess () returned 0xffffffff
	[0144.093] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19eca8 | out: TokenHandle=0x19eca8*=0x390) returned 1
	[0144.135] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e5b8 | out: phkResult=0x19e5b8*=0x3b0) returned 0x0
	[0144.135] RegQueryValueExW (in: hKey=0x3b0, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x19e5d4, lpData=0x0, lpcbData=0x19e5d0*=0x0 | out: lpType=0x19e5d4*=0x0, lpData=0x0, lpcbData=0x19e5d0*=0x0) returned 0x2
	[0144.136] RegCloseKey (hKey=0x3b0) returned 0x0
	[0144.726] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x747070
	[0145.106] WinHttpSetTimeouts (hInternet=0x747070, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1
	[0145.106] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x19ecb4 | out: pProxyConfig=0x19ecb4) returned 1
	[0145.567] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x19e4d8, nSize=0xa8 | out: lpBuffer="") returned 0x0
	[0145.567] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x19e4d8, nSize=0xa8 | out: lpBuffer="") returned 0x0
	[0145.571] EtwEventRegister (in: ProviderId=0x2745100, EnableCallback=0x124060e, CallbackContext=0x0, RegHandle=0x27450dc | out: RegHandle=0x27450dc) returned 0x0
	[0145.571] EtwEventSetInformation (RegHandle=0x6f2820, InformationClass=0x30, EventInformation=0x2, InformationLength=0x274509c) returned 0x0
	[0145.577] GetCurrentProcess () returned 0xffffffff
	[0145.577] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e97c | out: TokenHandle=0x19e97c*=0x3e8) returned 1
	[0145.580] GetCurrentProcess () returned 0xffffffff
	[0145.580] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e990 | out: TokenHandle=0x19e990*=0x3f4) returned 1
	[0145.649] GetCurrentProcess () returned 0xffffffff
	[0145.650] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e920 | out: TokenHandle=0x19e920*=0x3f8) returned 1
	[0145.651] GetCurrentProcess () returned 0xffffffff
	[0145.651] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e934 | out: TokenHandle=0x19e934*=0x3fc) returned 1
	[0145.653] GetTimeZoneInformation (in: lpTimeZoneInformation=0x19eb38 | out: lpTimeZoneInformation=0x19eb38) returned 0x2
	[0145.655] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x19e98c | out: pTimeZoneInformation=0x19e98c) returned 0x2
	[0145.656] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ea70 | out: phkResult=0x19ea70*=0x404) returned 0x0
	[0145.656] RegQueryValueExW (in: hKey=0x404, lpValueName="TZI", lpReserved=0x0, lpType=0x19ea8c, lpData=0x0, lpcbData=0x19ea88*=0x0 | out: lpType=0x19ea8c*=0x3, lpData=0x0, lpcbData=0x19ea88*=0x2c) returned 0x0
	[0145.656] RegQueryValueExW (in: hKey=0x404, lpValueName="TZI", lpReserved=0x0, lpType=0x19ea8c, lpData=0x2747e04, lpcbData=0x19ea88*=0x2c | out: lpType=0x19ea8c*=0x3, lpData=0x2747e04*, lpcbData=0x19ea88*=0x2c) returned 0x0
	[0145.657] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e8c4 | out: phkResult=0x19e8c4*=0x0) returned 0x2
	[0145.657] RegQueryValueExW (in: hKey=0x404, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19ea64, lpData=0x0, lpcbData=0x19ea60*=0x0 | out: lpType=0x19ea64*=0x1, lpData=0x0, lpcbData=0x19ea60*=0x20) returned 0x0
	[0145.658] RegQueryValueExW (in: hKey=0x404, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19ea64, lpData=0x2748228, lpcbData=0x19ea60*=0x20 | out: lpType=0x19ea64*=0x1, lpData="@tzres.dll,-320", lpcbData=0x19ea60*=0x20) returned 0x0
	[0145.658] RegQueryValueExW (in: hKey=0x404, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19ea64, lpData=0x0, lpcbData=0x19ea60*=0x0 | out: lpType=0x19ea64*=0x1, lpData=0x0, lpcbData=0x19ea60*=0x20) returned 0x0
	[0145.658] RegQueryValueExW (in: hKey=0x404, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19ea64, lpData=0x2748280, lpcbData=0x19ea60*=0x20 | out: lpType=0x19ea64*=0x1, lpData="@tzres.dll,-322", lpcbData=0x19ea60*=0x20) returned 0x0
	[0145.658] RegQueryValueExW (in: hKey=0x404, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19ea64, lpData=0x0, lpcbData=0x19ea60*=0x0 | out: lpType=0x19ea64*=0x1, lpData=0x0, lpcbData=0x19ea60*=0x20) returned 0x0
	[0145.658] RegQueryValueExW (in: hKey=0x404, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19ea64, lpData=0x27482d8, lpcbData=0x19ea60*=0x20 | out: lpType=0x19ea64*=0x1, lpData="@tzres.dll,-321", lpcbData=0x19ea60*=0x20) returned 0x0
	[0145.702] CoTaskMemAlloc (cb=0x20c) returned 0x755bb8
	[0145.702] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x755bb8 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0145.709] CoTaskMemFree (pv=0x755bb8) 
	[0145.709] CoTaskMemAlloc (cb=0x20c) returned 0x755bb8
	[0145.709] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19ea80, pwszFileMUIPath=0x755bb8, pcchFileMUIPath=0x19ea84, pululEnumerator=0x19ea78 | out: pwszLanguage=0x0, pcchLanguage=0x19ea80, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19ea84, pululEnumerator=0x19ea78) returned 1
	[0145.730] CoTaskMemFree (pv=0x0) 
	[0145.730] CoTaskMemFree (pv=0x755bb8) 
	[0145.730] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x52c0001
	[0145.780] CoTaskMemAlloc (cb=0x3ec) returned 0x755bb8
	[0145.780] LoadStringW (in: hInstance=0x52c0001, uID=0x140, lpBuffer=0x755bb8, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c
	[0145.780] CoTaskMemFree (pv=0x755bb8) 
	[0145.781] FreeLibrary (hLibModule=0x52c0001) returned 1
	[0145.781] CoTaskMemAlloc (cb=0x20c) returned 0x755bb8
	[0145.781] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x755bb8 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0145.781] CoTaskMemFree (pv=0x755bb8) 
	[0145.781] CoTaskMemAlloc (cb=0x20c) returned 0x755bb8
	[0145.781] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19ea80, pwszFileMUIPath=0x755bb8, pcchFileMUIPath=0x19ea84, pululEnumerator=0x19ea78 | out: pwszLanguage=0x0, pcchLanguage=0x19ea80, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19ea84, pululEnumerator=0x19ea78) returned 1
	[0145.784] CoTaskMemFree (pv=0x0) 
	[0145.784] CoTaskMemFree (pv=0x755bb8) 
	[0145.784] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x52c0001
	[0145.787] CoTaskMemAlloc (cb=0x3ec) returned 0x734ba0
	[0145.787] LoadStringW (in: hInstance=0x52c0001, uID=0x142, lpBuffer=0x734ba0, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17
	[0145.787] CoTaskMemFree (pv=0x734ba0) 
	[0145.787] FreeLibrary (hLibModule=0x52c0001) returned 1
	[0145.788] CoTaskMemAlloc (cb=0x20c) returned 0x734ba0
	[0145.788] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x734ba0 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0145.788] CoTaskMemFree (pv=0x734ba0) 
	[0145.788] CoTaskMemAlloc (cb=0x20c) returned 0x734ba0
	[0145.788] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19ea80, pwszFileMUIPath=0x734ba0, pcchFileMUIPath=0x19ea84, pululEnumerator=0x19ea78 | out: pwszLanguage=0x0, pcchLanguage=0x19ea80, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19ea84, pululEnumerator=0x19ea78) returned 1
	[0145.793] CoTaskMemFree (pv=0x0) 
	[0145.793] CoTaskMemFree (pv=0x734ba0) 
	[0145.793] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x52c0001
	[0145.796] CoTaskMemAlloc (cb=0x3ec) returned 0x734ba0
	[0145.796] LoadStringW (in: hInstance=0x52c0001, uID=0x141, lpBuffer=0x734ba0, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17
	[0145.796] CoTaskMemFree (pv=0x734ba0) 
	[0145.796] FreeLibrary (hLibModule=0x52c0001) returned 1
	[0145.797] RegCloseKey (hKey=0x404) returned 0x0
	[0145.799] SetEvent (hEvent=0x2c8) returned 1
	[0145.995] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x747a78 | out: hHeap=0x690000) returned 1
	[0148.548] SetEvent (hEvent=0x2c8) returned 1
	[0148.549] GetACP () returned 0x4e4
	[0148.591] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x488
	[0148.592] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x48c
	[0148.592] ioctlsocket (in: s=0x488, cmd=-2147195266, argp=0x19ed70 | out: argp=0x19ed70) returned 0
	[0148.592] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x490
	[0148.592] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x494
	[0148.593] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0x19ed70 | out: argp=0x19ed70) returned 0
	[0148.593] WSAIoctl (in: s=0x488, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19ed58, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19ed58, lpOverlapped=0x0) returned -1
	[0148.593] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19ea88, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0148.593] WSAEventSelect (s=0x488, hEventObject=0x48c, lNetworkEvents=512) returned 0
	[0148.593] WSAIoctl (in: s=0x490, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19ed58, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19ed58, lpOverlapped=0x0) returned -1
	[0148.593] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19ea88, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0148.594] WSAEventSelect (s=0x490, hEventObject=0x494, lNetworkEvents=512) returned 0
	[0148.622] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x19ed54*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x19ed54*=0xa78) returned 0x6f
	[0148.628] LocalAlloc (uFlags=0x0, uBytes=0xa78) returned 0x74db00
	[0148.628] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x74db00, SizePointer=0x19ed54*=0xa78 | out: AdapterAddresses=0x74db00*(Alignment=0x500000178, Length=0x178, IfIndex=0x5, Next=0x74dda8, AdapterName="{E25A642B-6CEB-4194-8F83-8BC82AF94F5A}", FirstUnicastAddress=0x74dd1c, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection", FriendlyName="Ethernet", PhysicalAddress=([0]=0xa4, [1]=0xe9, [2]=0xa3, [3]=0xbd, [4]=0xc2, [5]=0xb4, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x1c5, DdnsEnabled=0x1c5, RegisterAdapterSuffix=0x1c5, Dhcpv4Enabled=0x1c5, ReceiveOnly=0x1c5, NoMulticast=0x1c5, Ipv6OtherStatefulConfig=0x1c5, NetbiosOverTcpipEnabled=0x1c5, Ipv4Enabled=0x1c5, Ipv6Enabled=0x1c5, Ipv6ManagedAddressConfigurationSupported=0x1c5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x5, ZoneIndices=([0]=0x5, [1]=0x5, [2]=0x5, [3]=0x5, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x6008000000000, Dhcpv4Server.lpSockaddr=0x74dc78*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11eb6c9dc20d55b0, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x28, [5]=0xb6, [6]=0x28, [7]=0x5e, [8]=0x0, [9]=0xf, [10]=0xf3, [11]=0xe1, [12]=0x61, [13]=0x38, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x300053a, FirstDnsSuffix=0x0), SizePointer=0x19ed54*=0xa78) returned 0x0
	[0148.637] LocalFree (hMem=0x74db00) returned 0x0
	[0148.654] CoTaskMemAlloc (cb=0x20c) returned 0x7350e8
	[0148.654] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x7350e8, nSize=0x104 | out: lpBuffer="") returned 0x0
	[0148.654] CoTaskMemFree (pv=0x7350e8) 
	[0148.654] CoTaskMemAlloc (cb=0x20c) returned 0x7350e8
	[0148.654] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x7350e8, nSize=0x104 | out: lpBuffer="") returned 0x0
	[0148.655] CoTaskMemFree (pv=0x7350e8) 
	[0148.660] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x498
	[0148.661] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x49c
	[0148.680] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ebe0 | out: phkResult=0x19ebe0*=0x4a0) returned 0x0
	[0148.680] RegQueryValueExW (in: hKey=0x4a0, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x19ebfc, lpData=0x0, lpcbData=0x19ebf8*=0x0 | out: lpType=0x19ebfc*=0x0, lpData=0x0, lpcbData=0x19ebf8*=0x0) returned 0x2
	[0148.680] RegCloseKey (hKey=0x4a0) returned 0x0
	[0148.681] WSAConnect (in: s=0x498, name=0x2757034*(sa_family=2, sin_port=0x8826, sin_addr="185.154.13.159"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0148.705] closesocket (s=0x49c) returned 0
	[0148.705] setsockopt (s=0x498, level=6, optname=1, optval="\x01", optlen=4) returned 0
	[0149.117] send (s=0x498, buf=0x27586dc*, len=241, flags=0) returned 241
	[0149.118] select (in: nfds=0, readfds=0x2758960, writefds=0x0, exceptfds=0x0, timeout=0x19ee20*(tv_sec=0, tv_usec=350000) | out: readfds=0x2758960, writefds=0x0, exceptfds=0x0) returned 1
	[0149.158] setsockopt (s=0x498, level=65535, optname=4102, optval="Wj\x1b", optlen=4) returned 0
	[0149.159] recv (in: s=0x498, buf=0x2755804, len=4096, flags=0 | out: buf=0x2755804*) returned 25
	[0149.160] CoTaskMemAlloc (cb=0x8) returned 0x735e60
	[0149.160] WSASend (in: s=0x498, lpBuffers=0x735e60*=((len=0x89, buf=0x275727c*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x19ed24, dwFlags=0x0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x19ed24*=0x89, lpOverlapped=0x0) returned 0
	[0149.161] CoTaskMemFree (pv=0x735e60) 
	[0149.161] recv (in: s=0x498, buf=0x2755804, len=4096, flags=0 | out: buf=0x2755804*) returned 359
	[0149.350] SetEvent (hEvent=0x2c8) returned 1
	[0155.494] CoCreateGuid (in: pguid=0x19f048 | out: pguid=0x19f048*(Data1=0x7f79643b, Data2=0x20b9, Data3=0x40b3, Data4=([0]=0x9e, [1]=0xf1, [2]=0x36, [3]=0x93, [4]=0x2e, [5]=0x52, [6]=0x1b, [7]=0x8d))) returned 0x0
	[0155.555] QueryPerformanceCounter (in: lpPerformanceCount=0x19ede8 | out: lpPerformanceCount=0x19ede8*=1855602183530) returned 1
	[0155.599] SetEvent (hEvent=0x2c8) returned 1
	[0155.599] select (in: nfds=0, readfds=0x275c0e0, writefds=0x0, exceptfds=0x0, timeout=0x19eda0*(tv_sec=0, tv_usec=0) | out: readfds=0x275c0e0, writefds=0x0, exceptfds=0x0) returned 0
	[0155.600] send (s=0x498, buf=0x27586dc*, len=224, flags=0) returned 224
	[0155.601] select (in: nfds=0, readfds=0x275cbe4, writefds=0x0, exceptfds=0x0, timeout=0x19ee1c*(tv_sec=0, tv_usec=350000) | out: readfds=0x275cbe4, writefds=0x0, exceptfds=0x0) returned 1
	[0155.640] setsockopt (s=0x498, level=65535, optname=4102, optval="?w\x1b", optlen=4) returned 0
	[0155.640] recv (in: s=0x498, buf=0x2755804, len=4096, flags=0 | out: buf=0x2755804*) returned 25
	[0155.640] CoTaskMemAlloc (cb=0x8) returned 0x735f40
	[0155.640] WSASend (in: s=0x498, lpBuffers=0x735f40*=((len=0x90, buf=0x275c218*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x19ed20, dwFlags=0x0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x19ed20*=0x90, lpOverlapped=0x0) returned 0
	[0155.641] CoTaskMemFree (pv=0x735f40) 
	[0155.641] recv (in: s=0x498, buf=0x2755804, len=4096, flags=0 | out: buf=0x2755804*) returned 4096
	[0155.753] recv (in: s=0x498, buf=0x275dfec, len=800, flags=0 | out: buf=0x275dfec*) returned 800
	[0155.753] SetEvent (hEvent=0x2c8) returned 1
	[0155.994] GetCurrentProcess () returned 0xffffffff
	[0155.994] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e7cc | out: TokenHandle=0x19e7cc*=0x49c) returned 1
	[0155.996] GetCurrentProcess () returned 0xffffffff
	[0155.997] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e7e0 | out: TokenHandle=0x19e7e0*=0x4a0) returned 1
	[0156.666] QueryPerformanceCounter (in: lpPerformanceCount=0x19f284 | out: lpPerformanceCount=0x19f284*=1855713348639) returned 1
	[0156.667] SetEvent (hEvent=0x2c8) returned 1
	[0156.670] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x19f0dc | out: pFixedInfo=0x0, pOutBufLen=0x19f0dc) returned 0x6f
	[0157.154] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x737a38
	[0157.154] GetNetworkParams (in: pFixedInfo=0x737a38, pOutBufLen=0x19f0dc | out: pFixedInfo=0x737a38, pOutBufLen=0x19f0dc) returned 0x0
	[0157.173] LocalFree (hMem=0x737a38) returned 0x0
	[0157.174] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4e4
	[0157.175] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4b8
	[0157.175] GetAddrInfoW (in: pNodeName="api.ip.sb", pServiceName=0x0, pHints=0x19efcc*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x19ef74 | out: ppResult=0x19ef74*=0x6e7610*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="api.ip.sb.cdn.cloudflare.net", ai_addr=0x747640*(sa_family=2, sin_port=0x0, sin_addr="104.26.13.31"), ai_next=0x6e72f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7476a0*(sa_family=2, sin_port=0x0, sin_addr="172.67.75.172"), ai_next=0x6e7200*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7476b8*(sa_family=2, sin_port=0x0, sin_addr="104.26.12.31"), ai_next=0x0)))) returned 0
	[0166.411] FreeAddrInfoW (pAddrInfo=0x6e7610*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="api.ip.sb.cdn.cloudflare.net", ai_addr=0x747640*(sa_family=2, sin_port=0x0, sin_addr="104.26.13.31"), ai_next=0x6e72f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7476a0*(sa_family=2, sin_port=0x0, sin_addr="172.67.75.172"), ai_next=0x6e7200*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7476b8*(sa_family=2, sin_port=0x0, sin_addr="104.26.12.31"), ai_next=0x0)))) 
	[0166.413] GetAddrInfoW (in: pNodeName="api.ip.sb", pServiceName=0x0, pHints=0x19efcc*(ai_flags=131072, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x19ef74 | out: ppResult=0x19ef74*=0x6e7480*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="api.ip.sb", ai_addr=0x747640*(sa_family=2, sin_port=0x0, sin_addr="104.26.13.31"), ai_next=0x6e7188*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7476a0*(sa_family=2, sin_port=0x0, sin_addr="172.67.75.172"), ai_next=0x6e7278*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7476b8*(sa_family=2, sin_port=0x0, sin_addr="104.26.12.31"), ai_next=0x0)))) returned 0
	[0166.417] FreeAddrInfoW (pAddrInfo=0x6e7480*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="api.ip.sb", ai_addr=0x747640*(sa_family=2, sin_port=0x0, sin_addr="104.26.13.31"), ai_next=0x6e7188*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7476a0*(sa_family=2, sin_port=0x0, sin_addr="172.67.75.172"), ai_next=0x6e7278*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7476b8*(sa_family=2, sin_port=0x0, sin_addr="104.26.12.31"), ai_next=0x0)))) 
	[0166.418] WSAConnect (in: s=0x4e4, name=0x278f110*(sa_family=2, sin_port=0x1bb, sin_addr="104.26.13.31"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0166.440] closesocket (s=0x4b8) returned 0
	[0166.459] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19d9f8 | out: phkResult=0x19d9f8*=0x0) returned 0x2
	[0166.462] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef10 | out: phkResult=0x19ef10*=0x4b8) returned 0x0
	[0166.462] RegQueryValueExW (in: hKey=0x4b8, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x19ef2c, lpData=0x0, lpcbData=0x19ef28*=0x0 | out: lpType=0x19ef2c*=0x0, lpData=0x0, lpcbData=0x19ef28*=0x0) returned 0x2
	[0166.462] RegCloseKey (hKey=0x4b8) returned 0x0
	[0166.480] EnumerateSecurityPackagesW (in: pcPackages=0x19ef1c, ppPackageInfo=0x19eeb0 | out: pcPackages=0x19ef1c, ppPackageInfo=0x19eeb0) returned 0x0
	[0166.493] FreeContextBuffer (in: pvContextBuffer=0x75f988 | out: pvContextBuffer=0x75f988) returned 0x0
	[0166.500] GetCurrentProcess () returned 0xffffffff
	[0166.500] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ecfc | out: TokenHandle=0x19ecfc*=0x4fc) returned 1
	[0166.501] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x2790820, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x19ed50, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x2791d28, ptsExpiry=0x19ecd4 | out: phCredential=0x2791d28, ptsExpiry=0x19ecd4) returned 0x0
	[0167.486] InitializeSecurityContextW (in: phCredential=0x19ed14, phContext=0x0, pTargetName=0x278f154, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x2791f1c, pOutput=0x2791eb4, pfContextAttr=0x27907f4, ptsExpiry=0x19ed0c | out: phNewContext=0x2791f1c, pOutput=0x2791eb4, pfContextAttr=0x27907f4, ptsExpiry=0x19ed0c) returned 0x90312
	[0167.487] FreeContextBuffer (in: pvContextBuffer=0x730098 | out: pvContextBuffer=0x730098) returned 0x0
	[0167.491] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x74530000
	[0167.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="GetCurrentPackageId", cchWideChar=19, lpMultiByteStr=0x19ed5c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentPackageId;`Ï\x06j\x1b͹; «´khö\x19", lpUsedDefaultChar=0x0) returned 19
	[0167.491] GetProcAddress (hModule=0x74530000, lpProcName="GetCurrentPackageId") returned 0x76cdded0
	[0167.492] GetCurrentPackageId () returned 0x3d54
	[0167.493] send (s=0x4e4, buf=0x2791f30*, len=121, flags=0) returned 121
	[0167.496] recv (in: s=0x4e4, buf=0x2791f30, len=5, flags=0 | out: buf=0x2791f30*) returned 5
	[0167.518] recv (in: s=0x4e4, buf=0x2791f35, len=67, flags=0 | out: buf=0x2791f35*) returned 67
	[0167.518] InitializeSecurityContextW (in: phCredential=0x19ec78, phContext=0x19ed04, pTargetName=0x278f154, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2792204, Reserved2=0x0, phNewContext=0x2791f1c, pOutput=0x2792218, pfContextAttr=0x27907f4, ptsExpiry=0x19ec70 | out: phNewContext=0x2791f1c, pOutput=0x2792218, pfContextAttr=0x27907f4, ptsExpiry=0x19ec70) returned 0x90312
	[0167.519] recv (in: s=0x4e4, buf=0x27922a8, len=5, flags=0 | out: buf=0x27922a8*) returned 5
	[0167.519] recv (in: s=0x4e4, buf=0x27922c1, len=2908, flags=0 | out: buf=0x27922c1*) returned 2908
	[0167.519] InitializeSecurityContextW (in: phCredential=0x19ebe0, phContext=0x19ec6c, pTargetName=0x278f154, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2792e90, Reserved2=0x0, phNewContext=0x2791f1c, pOutput=0x2792ea4, pfContextAttr=0x27907f4, ptsExpiry=0x19ebd8 | out: phNewContext=0x2791f1c, pOutput=0x2792ea4, pfContextAttr=0x27907f4, ptsExpiry=0x19ebd8) returned 0x90312
	[0167.521] recv (in: s=0x4e4, buf=0x2792f34, len=5, flags=0 | out: buf=0x2792f34*) returned 5
	[0167.521] recv (in: s=0x4e4, buf=0x2792f4d, len=331, flags=0 | out: buf=0x2792f4d*) returned 331
	[0167.521] InitializeSecurityContextW (in: phCredential=0x19eb48, phContext=0x19ebd4, pTargetName=0x278f154, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2793108, Reserved2=0x0, phNewContext=0x2791f1c, pOutput=0x279311c, pfContextAttr=0x27907f4, ptsExpiry=0x19eb40 | out: phNewContext=0x2791f1c, pOutput=0x279311c, pfContextAttr=0x27907f4, ptsExpiry=0x19eb40) returned 0x90312
	[0167.522] recv (in: s=0x4e4, buf=0x27931ac, len=5, flags=0 | out: buf=0x27931ac*) returned 5
	[0167.522] recv (in: s=0x4e4, buf=0x27931c5, len=4, flags=0 | out: buf=0x27931c5*) returned 4
	[0167.522] InitializeSecurityContextW (in: phCredential=0x19eab0, phContext=0x19eb3c, pTargetName=0x278f154, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x279323c, Reserved2=0x0, phNewContext=0x2791f1c, pOutput=0x2793250, pfContextAttr=0x27907f4, ptsExpiry=0x19eaa8 | out: phNewContext=0x2791f1c, pOutput=0x2793250, pfContextAttr=0x27907f4, ptsExpiry=0x19eaa8) returned 0x90312
	[0167.532] FreeContextBuffer (in: pvContextBuffer=0x6f5568 | out: pvContextBuffer=0x6f5568) returned 0x0
	[0167.532] send (s=0x4e4, buf=0x27932cc*, len=134, flags=0) returned 134
	[0167.533] recv (in: s=0x4e4, buf=0x27932cc, len=5, flags=0 | out: buf=0x27932cc*) returned 5
	[0167.549] recv (in: s=0x4e4, buf=0x2793379, len=202, flags=0 | out: buf=0x2793379*) returned 202
	[0167.549] InitializeSecurityContextW (in: phCredential=0x19ea18, phContext=0x19eaa4, pTargetName=0x278f154, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x27934b4, Reserved2=0x0, phNewContext=0x2791f1c, pOutput=0x27934c8, pfContextAttr=0x27907f4, ptsExpiry=0x19ea10 | out: phNewContext=0x2791f1c, pOutput=0x27934c8, pfContextAttr=0x27907f4, ptsExpiry=0x19ea10) returned 0x90312
	[0167.570] recv (in: s=0x4e4, buf=0x2793558, len=5, flags=0 | out: buf=0x2793558*) returned 5
	[0167.570] recv (in: s=0x4e4, buf=0x2793571, len=1, flags=0 | out: buf=0x2793571*) returned 1
	[0167.570] InitializeSecurityContextW (in: phCredential=0x19e980, phContext=0x19ea0c, pTargetName=0x278f154, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x27935e4, Reserved2=0x0, phNewContext=0x2791f1c, pOutput=0x27935f8, pfContextAttr=0x27907f4, ptsExpiry=0x19e978 | out: phNewContext=0x2791f1c, pOutput=0x27935f8, pfContextAttr=0x27907f4, ptsExpiry=0x19e978) returned 0x90312
	[0167.572] recv (in: s=0x4e4, buf=0x2793688, len=5, flags=0 | out: buf=0x2793688*) returned 5
	[0167.572] recv (in: s=0x4e4, buf=0x27936a1, len=48, flags=0 | out: buf=0x27936a1*) returned 48
	[0167.572] InitializeSecurityContextW (in: phCredential=0x19e8e8, phContext=0x19e974, pTargetName=0x278f154, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2793744, Reserved2=0x0, phNewContext=0x2791f1c, pOutput=0x2793758, pfContextAttr=0x27907f4, ptsExpiry=0x19e8e0 | out: phNewContext=0x2791f1c, pOutput=0x2793758, pfContextAttr=0x27907f4, ptsExpiry=0x19e8e0) returned 0x0
	[0168.081] QueryContextAttributesW (in: phContext=0x2791f1c, ulAttribute=0x4, pBuffer=0x2793804 | out: pBuffer=0x2793804) returned 0x0
	[0168.081] QueryContextAttributesW (in: phContext=0x2791f1c, ulAttribute=0x5a, pBuffer=0x279385c | out: pBuffer=0x279385c) returned 0x0
	[0168.087] QueryContextAttributesW (in: phContext=0x2791f1c, ulAttribute=0x53, pBuffer=0x2793b10 | out: pBuffer=0x2793b10) returned 0x0
	[0168.093] CertDuplicateCertificateContext (pCertContext=0x7513f0) returned 0x7513f0
	[0168.093] CertDuplicateStore (hCertStore=0x6fcbf0) returned 0x6fcbf0
	[0168.094] CertEnumCertificatesInStore (hCertStore=0x6fcbf0, pPrevCertContext=0x0) returned 0x7516c0
	[0168.094] CertDuplicateCertificateContext (pCertContext=0x7516c0) returned 0x7516c0
	[0168.094] CertEnumCertificatesInStore (hCertStore=0x6fcbf0, pPrevCertContext=0x7516c0) returned 0x7513f0
	[0168.094] CertDuplicateCertificateContext (pCertContext=0x7513f0) returned 0x7513f0
	[0168.094] CertEnumCertificatesInStore (hCertStore=0x6fcbf0, pPrevCertContext=0x7513f0) returned 0x0
	[0168.094] CertCloseStore (hCertStore=0x6fcbf0, dwFlags=0x0) returned 1
	[0168.094] CertFreeCertificateContext (pCertContext=0x7513f0) returned 1
	[0168.104] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x6fca10
	[0168.106] CertAddCRLLinkToStore (in: hCertStore=0x6fca10, pCrlContext=0x7516c0, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0168.107] CertAddCRLLinkToStore (in: hCertStore=0x6fca10, pCrlContext=0x7513f0, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0168.125] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x7513f0, pTime=0x19e8f4, hAdditionalStore=0x6fca10, pChainPara=0x19e834, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x19e828 | out: ppChainContext=0x19e828) returned 1
	[0168.136] CertDuplicateCertificateChain (pChainContext=0x76b2a0) returned 0x76b2a0
	[0168.136] CertDuplicateCertificateContext (pCertContext=0x7513f0) returned 0x7513f0
	[0168.136] CertDuplicateCertificateContext (pCertContext=0x751170) returned 0x751170
	[0168.136] CertDuplicateCertificateContext (pCertContext=0x7518a0) returned 0x7518a0
	[0168.137] CertFreeCertificateChain (pChainContext=0x76b2a0) 
	[0168.137] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x76b2a0, pPolicyPara=0x19e9d4, pPolicyStatus=0x19e9c0 | out: pPolicyStatus=0x19e9c0) returned 1
	[0168.138] SetLastError (dwErrCode=0x0) 
	[0168.140] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x76b2a0, pPolicyPara=0x19ea40, pPolicyStatus=0x19e9e8 | out: pPolicyStatus=0x19e9e8) returned 1
	[0168.145] CertFreeCertificateChain (pChainContext=0x76b2a0) 
	[0168.145] CertFreeCertificateContext (pCertContext=0x7513f0) returned 1
	[0168.148] CoTaskMemAlloc (cb=0x20c) returned 0x76a7d8
	[0168.148] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x76a7d8, nSize=0x104 | out: lpBuffer="") returned 0x0
	[0168.148] CoTaskMemFree (pv=0x76a7d8) 
	[0168.148] CoTaskMemAlloc (cb=0x20c) returned 0x76a7d8
	[0168.148] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x76a7d8, nSize=0x104 | out: lpBuffer="") returned 0x0
	[0168.148] CoTaskMemFree (pv=0x76a7d8) 
	[0168.148] CoTaskMemAlloc (cb=0x20c) returned 0x76a7d8
	[0168.148] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x76a7d8, nSize=0x104 | out: lpBuffer="") returned 0x0
	[0168.148] CoTaskMemFree (pv=0x76a7d8) 
	[0168.148] CoTaskMemAlloc (cb=0x20c) returned 0x76a7d8
	[0168.148] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x76a7d8, nSize=0x104 | out: lpBuffer="") returned 0x0
	[0168.148] CoTaskMemFree (pv=0x76a7d8) 
	[0168.150] EncryptMessage (in: phContext=0x2791f1c, fQOP=0x0, pMessage=0x279bfc8, MessageSeqNo=0x0 | out: pMessage=0x279bfc8) returned 0x0
	[0168.150] send (s=0x4e4, buf=0x279aaa0*, len=101, flags=0) returned 101
	[0168.152] setsockopt (s=0x4e4, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0
	[0168.154] recv (in: s=0x4e4, buf=0x27a8260, len=5, flags=0 | out: buf=0x27a8260*) returned 5
	[0168.245] recv (in: s=0x4e4, buf=0x27a8265, len=1328, flags=0 | out: buf=0x27a8265*) returned 1328
	[0168.246] DecryptMessage (in: phContext=0x2791f1c, pMessage=0x27ac320, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x27ac320, pfQOP=0x0) returned 0x0
	[0168.248] setsockopt (s=0x4e4, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0
	[0169.635] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%", lpDst=0x19f1c8, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0169.635] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%\\Desktop", lpDst=0x19f1c8, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1e
	[0169.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0169.648] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0169.649] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0169.649] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*.txt", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0169.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0169.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0169.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0169.659] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0169.660] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0169.660] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*.doc*", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9674bf20, ftCreationTime.dwHighDateTime=0x1d7abdb, ftLastAccessTime.dwLowDateTime=0x2a8722e0, ftLastAccessTime.dwHighDateTime=0x1d7ac66, ftLastWriteTime.dwLowDateTime=0x2a8722e0, ftLastWriteTime.dwHighDateTime=0x1d7ac66, nFileSizeHigh=0x0, nFileSizeLow=0xc357, dwReserved0=0x0, dwReserved1=0x0, cFileName="_25u4 u3.docx", cAlternateFileName="_25U4U~1.DOC")) returned 0x784108
	[0169.661] FindNextFileW (in: hFindFile=0x784108, lpFindFileData=0x19efa8 | out: lpFindFileData=0x19efa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.661] FindClose (in: hFindFile=0x784108 | out: hFindFile=0x784108) returned 1
	[0169.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0169.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0169.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0169.661] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0169.661] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0169.661] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*key*", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0169.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0169.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0169.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0169.662] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0169.662] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0169.662] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*wallet*", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0169.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0169.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0169.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0169.663] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0169.663] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0169.663] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*seed*", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0169.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0169.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0169.668] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx", nBufferLength=0x105, lpBuffer=0x19ee10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx", lpFilePart=0x0) returned 0x2b
	[0169.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2bc) returned 1
	[0169.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_25u4 u3.docx"), fInfoLevelId=0x0, lpFileInformation=0x27b4234 | out: lpFileInformation=0x27b4234*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9674bf20, ftCreationTime.dwHighDateTime=0x1d7abdb, ftLastAccessTime.dwLowDateTime=0x2a8722e0, ftLastAccessTime.dwHighDateTime=0x1d7ac66, ftLastWriteTime.dwLowDateTime=0x2a8722e0, ftLastWriteTime.dwHighDateTime=0x1d7ac66, nFileSizeHigh=0x0, nFileSizeLow=0xc357)) returned 1
	[0169.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b8) returned 1
	[0169.668] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx", nBufferLength=0x105, lpBuffer=0x19ede0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx", lpFilePart=0x0) returned 0x2b
	[0169.674] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19edfc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0169.674] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0169.674] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx", lpFilePart=0x0) returned 0x2b
	[0169.756] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx", nBufferLength=0x105, lpBuffer=0x19ede4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx", lpFilePart=0x0) returned 0x2b
	[0169.757] CoTaskMemAlloc (cb=0x20c) returned 0x78ea98
	[0169.757] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x78ea98 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25
	[0169.757] CoTaskMemFree (pv=0x78ea98) 
	[0169.758] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eda0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16
	[0169.760] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19edb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0169.760] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0169.760] CoTaskMemAlloc (cb=0x20c) returned 0x78ea98
	[0169.760] GetTempFileNameW (in: lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x78ea98 | out: lpTempFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpC80C.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpc80c.tmp")) returned 0xc80c
	[0169.765] CoTaskMemFree (pv=0x78ea98) 
	[0169.779] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\_25u4 u3.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_25u4 u3.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpC80C.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpc80c.tmp"), bFailIfExists=0) returned 1
	[0170.990] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpC80C.tmp", nBufferLength=0x105, lpBuffer=0x19ecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpC80C.tmp", lpFilePart=0x0) returned 0x34
	[0170.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c8) returned 1
	[0170.990] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpC80C.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpc80c.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5e4
	[0170.991] GetFileType (hFile=0x5e4) returned 0x1
	[0170.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c4) returned 1
	[0170.991] GetFileType (hFile=0x5e4) returned 0x1
	[0170.991] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x19f2d0 | out: lpFileSizeHigh=0x19f2d0*=0x0) returned 0xc357
	[0170.992] ReadFile (in: hFile=0x5e4, lpBuffer=0x27b5874, nNumberOfBytesToRead=0xc357, lpNumberOfBytesRead=0x19f27c, lpOverlapped=0x0 | out: lpBuffer=0x27b5874*, lpNumberOfBytesRead=0x19f27c*=0xc357, lpOverlapped=0x0) returned 1
	[0170.993] CloseHandle (hObject=0x5e4) returned 1
	[0170.995] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpC80C.tmp", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpC80C.tmp", lpFilePart=0x0) returned 0x34
	[0170.995] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpC80C.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpc80c.tmp")) returned 1
	[0170.997] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%", lpDst=0x19f1c8, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0170.998] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%\\Documents", lpDst=0x19f1c8, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\Documents") returned 0x20
	[0170.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0170.998] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0170.998] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0170.998] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*.txt", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0170.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0170.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0170.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0170.999] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0170.999] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0170.999] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*.doc*", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf20851d0, ftCreationTime.dwHighDateTime=0x1d75956, ftLastAccessTime.dwLowDateTime=0x2fbb8090, ftLastAccessTime.dwHighDateTime=0x1d79789, ftLastWriteTime.dwLowDateTime=0x2fbb8090, ftLastWriteTime.dwHighDateTime=0x1d79789, nFileSizeHigh=0x0, nFileSizeLow=0x81fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C0CC wXtnQbxcIx0Yw.docx", cAlternateFileName="C0CCWX~1.DOC")) returned 0x783d08
	[0170.999] FindNextFileW (in: hFindFile=0x783d08, lpFindFileData=0x19efa8 | out: lpFindFileData=0x19efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12b65400, ftCreationTime.dwHighDateTime=0x1d7aa55, ftLastAccessTime.dwLowDateTime=0x8950c720, ftLastAccessTime.dwHighDateTime=0x1d7ad8f, ftLastWriteTime.dwLowDateTime=0x8950c720, ftLastWriteTime.dwHighDateTime=0x1d7ad8f, nFileSizeHigh=0x0, nFileSizeLow=0xb057, dwReserved0=0x0, dwReserved1=0x0, cFileName="lRxOx1U0aktspsok.docx", cAlternateFileName="LRXOX1~1.DOC")) returned 1
	[0170.999] FindNextFileW (in: hFindFile=0x783d08, lpFindFileData=0x19efa8 | out: lpFindFileData=0x19efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa48cc460, ftCreationTime.dwHighDateTime=0x1d73a37, ftLastAccessTime.dwLowDateTime=0xb7fbaa0, ftLastAccessTime.dwHighDateTime=0x1d79de9, ftLastWriteTime.dwLowDateTime=0xb7fbaa0, ftLastWriteTime.dwHighDateTime=0x1d79de9, nFileSizeHigh=0x0, nFileSizeLow=0x15295, dwReserved0=0x0, dwReserved1=0x0, cFileName="O2cncwJj9.docx", cAlternateFileName="O2CNCW~1.DOC")) returned 1
	[0171.000] FindNextFileW (in: hFindFile=0x783d08, lpFindFileData=0x19efa8 | out: lpFindFileData=0x19efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccff0700, ftCreationTime.dwHighDateTime=0x1d767eb, ftLastAccessTime.dwLowDateTime=0xadc3d830, ftLastAccessTime.dwHighDateTime=0x1d79440, ftLastWriteTime.dwLowDateTime=0xadc3d830, ftLastWriteTime.dwHighDateTime=0x1d79440, nFileSizeHigh=0x0, nFileSizeLow=0x1943, dwReserved0=0x0, dwReserved1=0x0, cFileName="oJr6ZesmKU IzSK.docx", cAlternateFileName="OJR6ZE~1.DOC")) returned 1
	[0171.000] FindNextFileW (in: hFindFile=0x783d08, lpFindFileData=0x19efa8 | out: lpFindFileData=0x19efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fb8b20, ftCreationTime.dwHighDateTime=0x1d7a8c3, ftLastAccessTime.dwLowDateTime=0xd37e3620, ftLastAccessTime.dwHighDateTime=0x1d7a92f, ftLastWriteTime.dwLowDateTime=0xd37e3620, ftLastWriteTime.dwHighDateTime=0x1d7a92f, nFileSizeHigh=0x0, nFileSizeLow=0xd226, dwReserved0=0x0, dwReserved1=0x0, cFileName="x87mVcjjbZa.docx", cAlternateFileName="X87MVC~1.DOC")) returned 1
	[0171.000] FindNextFileW (in: hFindFile=0x783d08, lpFindFileData=0x19efa8 | out: lpFindFileData=0x19efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb6d700, ftCreationTime.dwHighDateTime=0x1d79010, ftLastAccessTime.dwLowDateTime=0xecc9c350, ftLastAccessTime.dwHighDateTime=0x1d792c4, ftLastWriteTime.dwLowDateTime=0xecc9c350, ftLastWriteTime.dwHighDateTime=0x1d792c4, nFileSizeHigh=0x0, nFileSizeLow=0x12607, dwReserved0=0x0, dwReserved1=0x0, cFileName="YFe19.docx", cAlternateFileName="YFE19~1.DOC")) returned 1
	[0171.000] FindNextFileW (in: hFindFile=0x783d08, lpFindFileData=0x19efa8 | out: lpFindFileData=0x19efa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.000] FindClose (in: hFindFile=0x783d08 | out: hFindFile=0x783d08) returned 1
	[0171.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0171.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0171.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0171.000] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.000] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0171.000] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*key*", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0171.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0171.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0171.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0171.001] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.001] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0171.001] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*wallet*", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0171.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0171.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0171.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f270) returned 1
	[0171.002] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.002] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0171.002] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*seed*", lpFindFileData=0x19ef98 | out: lpFindFileData=0x19ef98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0171.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f230) returned 1
	[0171.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f23c) returned 1
	[0171.002] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx", nBufferLength=0x105, lpBuffer=0x19ee10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx", lpFilePart=0x0) returned 0x37
	[0171.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2bc) returned 1
	[0171.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\c0cc wxtnqbxcix0yw.docx"), fInfoLevelId=0x0, lpFileInformation=0x27c4b48 | out: lpFileInformation=0x27c4b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf20851d0, ftCreationTime.dwHighDateTime=0x1d75956, ftLastAccessTime.dwLowDateTime=0x2fbb8090, ftLastAccessTime.dwHighDateTime=0x1d79789, ftLastWriteTime.dwLowDateTime=0x2fbb8090, ftLastWriteTime.dwHighDateTime=0x1d79789, nFileSizeHigh=0x0, nFileSizeLow=0x81fe)) returned 1
	[0171.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b8) returned 1
	[0171.002] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx", nBufferLength=0x105, lpBuffer=0x19ede0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx", lpFilePart=0x0) returned 0x37
	[0171.002] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19edfc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.003] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.003] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx", lpFilePart=0x0) returned 0x37
	[0171.003] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx", nBufferLength=0x105, lpBuffer=0x19ede4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx", lpFilePart=0x0) returned 0x37
	[0171.003] CoTaskMemAlloc (cb=0x20c) returned 0x78ea98
	[0171.003] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x78ea98 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25
	[0171.003] CoTaskMemFree (pv=0x78ea98) 
	[0171.003] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eda0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16
	[0171.003] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19edb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.004] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.004] CoTaskMemAlloc (cb=0x20c) returned 0x78ea98
	[0171.004] GetTempFileNameW (in: lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x78ea98 | out: lpTempFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCEF.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpccef.tmp")) returned 0xccef
	[0171.004] CoTaskMemFree (pv=0x78ea98) 
	[0171.005] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\C0CC wXtnQbxcIx0Yw.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\c0cc wxtnqbxcix0yw.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCEF.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpccef.tmp"), bFailIfExists=0) returned 1
	[0171.019] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCEF.tmp", nBufferLength=0x105, lpBuffer=0x19ecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCEF.tmp", lpFilePart=0x0) returned 0x34
	[0171.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c8) returned 1
	[0171.019] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCEF.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpccef.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5e4
	[0171.020] GetFileType (hFile=0x5e4) returned 0x1
	[0171.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c4) returned 1
	[0171.020] GetFileType (hFile=0x5e4) returned 0x1
	[0171.020] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x19f2d0 | out: lpFileSizeHigh=0x19f2d0*=0x0) returned 0x81fe
	[0171.020] ReadFile (in: hFile=0x5e4, lpBuffer=0x27c6240, nNumberOfBytesToRead=0x81fe, lpNumberOfBytesRead=0x19f27c, lpOverlapped=0x0 | out: lpBuffer=0x27c6240*, lpNumberOfBytesRead=0x19f27c*=0x81fe, lpOverlapped=0x0) returned 1
	[0171.020] CloseHandle (hObject=0x5e4) returned 1
	[0171.021] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCEF.tmp", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCEF.tmp", lpFilePart=0x0) returned 0x34
	[0171.021] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCEF.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpccef.tmp")) returned 1
	[0171.023] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx", nBufferLength=0x105, lpBuffer=0x19ee10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx", lpFilePart=0x0) returned 0x35
	[0171.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2bc) returned 1
	[0171.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\lrxox1u0aktspsok.docx"), fInfoLevelId=0x0, lpFileInformation=0x27ce4d4 | out: lpFileInformation=0x27ce4d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12b65400, ftCreationTime.dwHighDateTime=0x1d7aa55, ftLastAccessTime.dwLowDateTime=0x8950c720, ftLastAccessTime.dwHighDateTime=0x1d7ad8f, ftLastWriteTime.dwLowDateTime=0x8950c720, ftLastWriteTime.dwHighDateTime=0x1d7ad8f, nFileSizeHigh=0x0, nFileSizeLow=0xb057)) returned 1
	[0171.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b8) returned 1
	[0171.023] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx", nBufferLength=0x105, lpBuffer=0x19ede0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx", lpFilePart=0x0) returned 0x35
	[0171.024] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19edfc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.024] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.024] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx", lpFilePart=0x0) returned 0x35
	[0171.024] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx", nBufferLength=0x105, lpBuffer=0x19ede4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx", lpFilePart=0x0) returned 0x35
	[0171.024] CoTaskMemAlloc (cb=0x20c) returned 0x78ea98
	[0171.024] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x78ea98 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25
	[0171.024] CoTaskMemFree (pv=0x78ea98) 
	[0171.024] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eda0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16
	[0171.024] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19edb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.025] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.025] CoTaskMemAlloc (cb=0x20c) returned 0x78ea98
	[0171.025] GetTempFileNameW (in: lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x78ea98 | out: lpTempFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCFF.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpccff.tmp")) returned 0xccff
	[0171.025] CoTaskMemFree (pv=0x78ea98) 
	[0171.026] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\lRxOx1U0aktspsok.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\lrxox1u0aktspsok.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCFF.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpccff.tmp"), bFailIfExists=0) returned 1
	[0171.031] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCFF.tmp", nBufferLength=0x105, lpBuffer=0x19ecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCFF.tmp", lpFilePart=0x0) returned 0x34
	[0171.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c8) returned 1
	[0171.031] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCFF.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpccff.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5e4
	[0171.031] GetFileType (hFile=0x5e4) returned 0x1
	[0171.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c4) returned 1
	[0171.031] GetFileType (hFile=0x5e4) returned 0x1
	[0171.031] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x19f2d0 | out: lpFileSizeHigh=0x19f2d0*=0x0) returned 0xb057
	[0171.032] ReadFile (in: hFile=0x5e4, lpBuffer=0x27cfbb0, nNumberOfBytesToRead=0xb057, lpNumberOfBytesRead=0x19f27c, lpOverlapped=0x0 | out: lpBuffer=0x27cfbb0*, lpNumberOfBytesRead=0x19f27c*=0xb057, lpOverlapped=0x0) returned 1
	[0171.033] CloseHandle (hObject=0x5e4) returned 1
	[0171.033] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCFF.tmp", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCFF.tmp", lpFilePart=0x0) returned 0x34
	[0171.033] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCCFF.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpccff.tmp")) returned 1
	[0171.034] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx", nBufferLength=0x105, lpBuffer=0x19ee10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx", lpFilePart=0x0) returned 0x2e
	[0171.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2bc) returned 1
	[0171.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\o2cncwjj9.docx"), fInfoLevelId=0x0, lpFileInformation=0x27dac9c | out: lpFileInformation=0x27dac9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa48cc460, ftCreationTime.dwHighDateTime=0x1d73a37, ftLastAccessTime.dwLowDateTime=0xb7fbaa0, ftLastAccessTime.dwHighDateTime=0x1d79de9, ftLastWriteTime.dwLowDateTime=0xb7fbaa0, ftLastWriteTime.dwHighDateTime=0x1d79de9, nFileSizeHigh=0x0, nFileSizeLow=0x15295)) returned 1
	[0171.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b8) returned 1
	[0171.034] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx", nBufferLength=0x105, lpBuffer=0x19ede0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx", lpFilePart=0x0) returned 0x2e
	[0171.034] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19edfc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.034] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.035] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx", lpFilePart=0x0) returned 0x2e
	[0171.035] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx", nBufferLength=0x105, lpBuffer=0x19ede4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx", lpFilePart=0x0) returned 0x2e
	[0171.035] CoTaskMemAlloc (cb=0x20c) returned 0x78ea98
	[0171.035] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x78ea98 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25
	[0171.035] CoTaskMemFree (pv=0x78ea98) 
	[0171.035] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eda0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16
	[0171.035] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19edb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.035] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.035] CoTaskMemAlloc (cb=0x20c) returned 0x78ea98
	[0171.035] GetTempFileNameW (in: lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x78ea98 | out: lpTempFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD10.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd10.tmp")) returned 0xcd10
	[0171.036] CoTaskMemFree (pv=0x78ea98) 
	[0171.036] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\O2cncwJj9.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\o2cncwjj9.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD10.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd10.tmp"), bFailIfExists=0) returned 1
	[0171.078] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD10.tmp", nBufferLength=0x105, lpBuffer=0x19ecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD10.tmp", lpFilePart=0x0) returned 0x34
	[0171.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c8) returned 1
	[0171.078] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD10.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd10.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5e4
	[0171.079] GetFileType (hFile=0x5e4) returned 0x1
	[0171.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c4) returned 1
	[0171.079] GetFileType (hFile=0x5e4) returned 0x1
	[0171.079] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x19f2d0 | out: lpFileSizeHigh=0x19f2d0*=0x0) returned 0x15295
	[0171.079] ReadFile (in: hFile=0x5e4, lpBuffer=0x36f2090, nNumberOfBytesToRead=0x15295, lpNumberOfBytesRead=0x19f27c, lpOverlapped=0x0 | out: lpBuffer=0x36f2090*, lpNumberOfBytesRead=0x19f27c*=0x15295, lpOverlapped=0x0) returned 1
	[0171.081] CloseHandle (hObject=0x5e4) returned 1
	[0171.081] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD10.tmp", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD10.tmp", lpFilePart=0x0) returned 0x34
	[0171.081] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD10.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd10.tmp")) returned 1
	[0171.083] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx", nBufferLength=0x105, lpBuffer=0x19ee10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx", lpFilePart=0x0) returned 0x34
	[0171.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2bc) returned 1
	[0171.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ojr6zesmku izsk.docx"), fInfoLevelId=0x0, lpFileInformation=0x27dc3ac | out: lpFileInformation=0x27dc3ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccff0700, ftCreationTime.dwHighDateTime=0x1d767eb, ftLastAccessTime.dwLowDateTime=0xadc3d830, ftLastAccessTime.dwHighDateTime=0x1d79440, ftLastWriteTime.dwLowDateTime=0xadc3d830, ftLastWriteTime.dwHighDateTime=0x1d79440, nFileSizeHigh=0x0, nFileSizeLow=0x1943)) returned 1
	[0171.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b8) returned 1
	[0171.083] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx", nBufferLength=0x105, lpBuffer=0x19ede0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx", lpFilePart=0x0) returned 0x34
	[0171.083] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19edfc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.083] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.083] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx", lpFilePart=0x0) returned 0x34
	[0171.083] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx", nBufferLength=0x105, lpBuffer=0x19ede4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx", lpFilePart=0x0) returned 0x34
	[0171.083] CoTaskMemAlloc (cb=0x20c) returned 0x75e4e0
	[0171.083] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x75e4e0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25
	[0171.084] CoTaskMemFree (pv=0x75e4e0) 
	[0171.084] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eda0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16
	[0171.084] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19edb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.084] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.084] CoTaskMemAlloc (cb=0x20c) returned 0x75e4e0
	[0171.084] GetTempFileNameW (in: lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x75e4e0 | out: lpTempFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD40.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd40.tmp")) returned 0xcd40
	[0171.087] CoTaskMemFree (pv=0x75e4e0) 
	[0171.087] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\oJr6ZesmKU IzSK.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ojr6zesmku izsk.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD40.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd40.tmp"), bFailIfExists=0) returned 1
	[0171.091] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD40.tmp", nBufferLength=0x105, lpBuffer=0x19ecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD40.tmp", lpFilePart=0x0) returned 0x34
	[0171.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c8) returned 1
	[0171.091] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD40.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd40.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5e4
	[0171.092] GetFileType (hFile=0x5e4) returned 0x1
	[0171.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c4) returned 1
	[0171.092] GetFileType (hFile=0x5e4) returned 0x1
	[0171.092] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x19f2d0 | out: lpFileSizeHigh=0x19f2d0*=0x0) returned 0x1943
	[0171.092] ReadFile (in: hFile=0x5e4, lpBuffer=0x27dda88, nNumberOfBytesToRead=0x1943, lpNumberOfBytesRead=0x19f27c, lpOverlapped=0x0 | out: lpBuffer=0x27dda88*, lpNumberOfBytesRead=0x19f27c*=0x1943, lpOverlapped=0x0) returned 1
	[0171.092] CloseHandle (hObject=0x5e4) returned 1
	[0171.092] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD40.tmp", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD40.tmp", lpFilePart=0x0) returned 0x34
	[0171.093] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD40.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd40.tmp")) returned 1
	[0171.094] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx", nBufferLength=0x105, lpBuffer=0x19ee10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx", lpFilePart=0x0) returned 0x30
	[0171.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2bc) returned 1
	[0171.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x87mvcjjbza.docx"), fInfoLevelId=0x0, lpFileInformation=0x27df48c | out: lpFileInformation=0x27df48c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fb8b20, ftCreationTime.dwHighDateTime=0x1d7a8c3, ftLastAccessTime.dwLowDateTime=0xd37e3620, ftLastAccessTime.dwHighDateTime=0x1d7a92f, ftLastWriteTime.dwLowDateTime=0xd37e3620, ftLastWriteTime.dwHighDateTime=0x1d7a92f, nFileSizeHigh=0x0, nFileSizeLow=0xd226)) returned 1
	[0171.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b8) returned 1
	[0171.094] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx", nBufferLength=0x105, lpBuffer=0x19ede0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx", lpFilePart=0x0) returned 0x30
	[0171.094] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19edfc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.094] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.094] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx", lpFilePart=0x0) returned 0x30
	[0171.094] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx", nBufferLength=0x105, lpBuffer=0x19ede4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx", lpFilePart=0x0) returned 0x30
	[0171.095] CoTaskMemAlloc (cb=0x20c) returned 0x75e4e0
	[0171.095] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x75e4e0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25
	[0171.095] CoTaskMemFree (pv=0x75e4e0) 
	[0171.095] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eda0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16
	[0171.095] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19edb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.095] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.095] CoTaskMemAlloc (cb=0x20c) returned 0x75e4e0
	[0171.095] GetTempFileNameW (in: lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x75e4e0 | out: lpTempFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD50.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd50.tmp")) returned 0xcd50
	[0171.096] CoTaskMemFree (pv=0x75e4e0) 
	[0171.096] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\x87mVcjjbZa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x87mvcjjbza.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD50.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd50.tmp"), bFailIfExists=0) returned 1
	[0171.101] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD50.tmp", nBufferLength=0x105, lpBuffer=0x19ecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD50.tmp", lpFilePart=0x0) returned 0x34
	[0171.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c8) returned 1
	[0171.102] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD50.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd50.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5e4
	[0171.102] GetFileType (hFile=0x5e4) returned 0x1
	[0171.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c4) returned 1
	[0171.102] GetFileType (hFile=0x5e4) returned 0x1
	[0171.102] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x19f2d0 | out: lpFileSizeHigh=0x19f2d0*=0x0) returned 0xd226
	[0171.103] ReadFile (in: hFile=0x5e4, lpBuffer=0x27e0b30, nNumberOfBytesToRead=0xd226, lpNumberOfBytesRead=0x19f27c, lpOverlapped=0x0 | out: lpBuffer=0x27e0b30*, lpNumberOfBytesRead=0x19f27c*=0xd226, lpOverlapped=0x0) returned 1
	[0171.103] CloseHandle (hObject=0x5e4) returned 1
	[0171.103] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD50.tmp", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD50.tmp", lpFilePart=0x0) returned 0x34
	[0171.104] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD50.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd50.tmp")) returned 1
	[0171.105] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx", nBufferLength=0x105, lpBuffer=0x19ee10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx", lpFilePart=0x0) returned 0x2a
	[0171.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2bc) returned 1
	[0171.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\yfe19.docx"), fInfoLevelId=0x0, lpFileInformation=0x27eddec | out: lpFileInformation=0x27eddec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb6d700, ftCreationTime.dwHighDateTime=0x1d79010, ftLastAccessTime.dwLowDateTime=0xecc9c350, ftLastAccessTime.dwHighDateTime=0x1d792c4, ftLastWriteTime.dwLowDateTime=0xecc9c350, ftLastWriteTime.dwHighDateTime=0x1d792c4, nFileSizeHigh=0x0, nFileSizeLow=0x12607)) returned 1
	[0171.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b8) returned 1
	[0171.105] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx", nBufferLength=0x105, lpBuffer=0x19ede0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx", lpFilePart=0x0) returned 0x2a
	[0171.105] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19edfc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.105] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0171.105] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx", nBufferLength=0x105, lpBuffer=0x19ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx", lpFilePart=0x0) returned 0x2a
	[0171.105] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx", nBufferLength=0x105, lpBuffer=0x19ede4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx", lpFilePart=0x0) returned 0x2a
	[0171.106] CoTaskMemAlloc (cb=0x20c) returned 0x75e4e0
	[0171.106] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x75e4e0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25
	[0171.106] CoTaskMemFree (pv=0x75e4e0) 
	[0171.106] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eda0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16
	[0171.106] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19edb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.106] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29
	[0171.106] CoTaskMemAlloc (cb=0x20c) returned 0x75e4e0
	[0171.106] GetTempFileNameW (in: lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x75e4e0 | out: lpTempFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD61.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd61.tmp")) returned 0xcd61
	[0171.107] CoTaskMemFree (pv=0x75e4e0) 
	[0171.107] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YFe19.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\yfe19.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD61.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd61.tmp"), bFailIfExists=0) returned 1
	[0171.115] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD61.tmp", nBufferLength=0x105, lpBuffer=0x19ecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD61.tmp", lpFilePart=0x0) returned 0x34
	[0171.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c8) returned 1
	[0171.115] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD61.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd61.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5e4
	[0171.115] GetFileType (hFile=0x5e4) returned 0x1
	[0171.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c4) returned 1
	[0171.115] GetFileType (hFile=0x5e4) returned 0x1
	[0171.115] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x19f2d0 | out: lpFileSizeHigh=0x19f2d0*=0x0) returned 0x12607
	[0171.117] ReadFile (in: hFile=0x5e4, lpBuffer=0x27ef43c, nNumberOfBytesToRead=0x12607, lpNumberOfBytesRead=0x19f27c, lpOverlapped=0x0 | out: lpBuffer=0x27ef43c*, lpNumberOfBytesRead=0x19f27c*=0x12607, lpOverlapped=0x0) returned 1
	[0171.118] CloseHandle (hObject=0x5e4) returned 1
	[0171.118] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD61.tmp", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD61.tmp", lpFilePart=0x0) returned 0x34
	[0171.118] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\tmpCD61.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\tmpcd61.tmp")) returned 1
	[0172.688] GdiplusStartup (in: token=0x542f0b0, input=0x19e800, output=0x19e850 | out: token=0x542f0b0, output=0x19e850) returned 0x0
	[0172.765] GdipCreateFromHWND (hwnd=0x0, graphics=0x19f2f0) returned 0x0
	[0172.774] GdipGetDC (graphics=0x5a61f08, hdc=0x19f300) returned 0x0
	[0172.781] GetDeviceCaps (hdc=0x4010197, index=10) returned 900
	[0172.781] GetDeviceCaps (hdc=0x4010197, index=117) returned 900
	[0172.782] GdipReleaseDC (graphics=0x5a61f08, hdc=0x4010197) returned 0x0
	[0172.783] GdipDeleteGraphics (graphics=0x5a61f08) returned 0x0
	[0172.787] GetSystemMetrics (nIndex=80) returned 1
	[0172.801] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1240756, dwData=0x0) returned 1
	[0172.805] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19f0b4 | out: lpmi=0x19f0b4) returned 1
	[0172.841] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x150109cc
	[0172.842] GetDeviceCaps (hdc=0x150109cc, index=12) returned 32
	[0172.843] GetDeviceCaps (hdc=0x150109cc, index=14) returned 1
	[0172.844] DeleteDC (hdc=0x150109cc) returned 1
	[0172.848] GetProcessWindowStation () returned 0xe4
	[0172.848] GetUserObjectInformationA (in: hObj=0xe4, nIndex=1, pvInfo=0x2817b34, nLength=0xc, lpnLengthNeeded=0x19f294 | out: pvInfo=0x2817b34, lpnLengthNeeded=0x19f294) returned 1
	[0172.851] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x640
	[0173.162] CoCreateGuid (in: pguid=0x19e3a8 | out: pguid=0x19e3a8*(Data1=0xec49a525, Data2=0x5213, Data3=0x4358, Data4=([0]=0x97, [1]=0xe6, [2]=0x94, [3]=0x60, [4]=0x9b, [5]=0x37, [6]=0x41, [7]=0xef))) returned 0x0
	[0173.719] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x668
	[0173.722] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eba0 | out: ppv=0x19eba0*=0x6d0ae4) returned 0x0
	[0173.758] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19de2c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
	[0173.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=63, lpMultiByteStr=0x19e330, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll\x05ò\x186l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 63
	[0173.759] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll") returned 0x6cbd0000
	[0173.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x19e364, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 13
	[0173.959] GetProcAddress (hModule=0x6cbd0000, lpProcName="ResetSecurity") returned 0x6cbd26fe
	[0173.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x19e364, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 11
	[0173.966] GetProcAddress (hModule=0x6cbd0000, lpProcName="SetSecurity") returned 0x6cbd2740
	[0173.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x19e360, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServices6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 18
	[0173.971] GetProcAddress (hModule=0x6cbd0000, lpProcName="BlessIWbemServices") returned 0x6cbd1e89
	[0173.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x19e358, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObjectD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 24
	[0173.981] GetProcAddress (hModule=0x6cbd0000, lpProcName="BlessIWbemServicesObject") returned 0x6cbd1edb
	[0173.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x19e360, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 17
	[0173.988] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetPropertyHandle") returned 0x6cbd23d4
	[0174.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x19e360, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValue6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 18
	[0174.007] GetProcAddress (hModule=0x6cbd0000, lpProcName="WritePropertyValue") returned 0x6cbd2837
	[0174.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x19e36c, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 5
	[0174.012] GetProcAddress (hModule=0x6cbd0000, lpProcName="Clone") returned 0x6cbd1f2d
	[0174.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x19e360, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 15
	[0174.015] GetProcAddress (hModule=0x6cbd0000, lpProcName="VerifyClientKey") returned 0x6cbd27d4
	[0174.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x19e360, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 15
	[0174.018] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetQualifierSet") returned 0x6cbd2435
	[0174.019] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x19e36c, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 3
	[0174.019] GetProcAddress (hModule=0x6cbd0000, lpProcName="Get") returned 0x6cbd22f4
	[0174.022] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x19e36c, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 3
	[0174.023] GetProcAddress (hModule=0x6cbd0000, lpProcName="Put") returned 0x6cbd24de
	[0174.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x19e36c, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Delete6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 6
	[0174.025] GetProcAddress (hModule=0x6cbd0000, lpProcName="Delete") returned 0x6cbd2151
	[0174.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x19e368, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNamesD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 8
	[0174.026] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetNames") returned 0x6cbd23a2
	[0174.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x19e360, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumerationD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 16
	[0174.029] GetProcAddress (hModule=0x6cbd0000, lpProcName="BeginEnumeration") returned 0x6cbd1e63
	[0174.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x19e36c, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 4
	[0174.035] GetProcAddress (hModule=0x6cbd0000, lpProcName="Next") returned 0x6cbd24a3
	[0174.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x19e364, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumeration6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 14
	[0174.045] GetProcAddress (hModule=0x6cbd0000, lpProcName="EndEnumeration") returned 0x6cbd21e2
	[0174.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x19e358, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 23
	[0174.049] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetPropertyQualifierSet") returned 0x6cbd241f
	[0174.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x19e36c, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 5
	[0174.051] GetProcAddress (hModule=0x6cbd0000, lpProcName="Clone") returned 0x6cbd1f2d
	[0174.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x19e364, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 13
	[0174.052] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetObjectText") returned 0x6cbd23be
	[0174.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x19e360, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClass\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 17
	[0174.054] GetProcAddress (hModule=0x6cbd0000, lpProcName="SpawnDerivedClass") returned 0x6cbd2786
	[0174.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x19e364, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 13
	[0174.057] GetProcAddress (hModule=0x6cbd0000, lpProcName="SpawnInstance") returned 0x6cbd279c
	[0174.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x19e368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 9
	[0174.058] GetProcAddress (hModule=0x6cbd0000, lpProcName="CompareTo") returned 0x6cbd1fad
	[0174.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x19e360, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOrigin\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 17
	[0174.060] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetPropertyOrigin") returned 0x6cbd2409
	[0174.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x19e364, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFromD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 12
	[0174.062] GetProcAddress (hModule=0x6cbd0000, lpProcName="InheritsFrom") returned 0x6cbd2448
	[0174.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x19e368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 9
	[0174.063] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetMethod") returned 0x6cbd235a
	[0174.064] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x19e368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethod\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 9
	[0174.064] GetProcAddress (hModule=0x6cbd0000, lpProcName="PutMethod") returned 0x6cbd25fa
	[0174.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x19e364, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethodD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 12
	[0174.065] GetProcAddress (hModule=0x6cbd0000, lpProcName="DeleteMethod") returned 0x6cbd2164
	[0174.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x19e35c, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumeration6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 22
	[0174.066] GetProcAddress (hModule=0x6cbd0000, lpProcName="BeginMethodEnumeration") returned 0x6cbd1e76
	[0174.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x19e368, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethod6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 10
	[0174.066] GetProcAddress (hModule=0x6cbd0000, lpProcName="NextMethod") returned 0x6cbd24c2
	[0174.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x19e35c, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumerationD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 20
	[0174.067] GetProcAddress (hModule=0x6cbd0000, lpProcName="EndMethodEnumeration") returned 0x6cbd21f2
	[0174.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x19e35c, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSet\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 21
	[0174.068] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetMethodQualifierSet") returned 0x6cbd238c
	[0174.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x19e360, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 15
	[0174.068] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetMethodOrigin") returned 0x6cbd2376
	[0174.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x19e360, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 16
	[0174.069] GetProcAddress (hModule=0x6cbd0000, lpProcName="QualifierSet_Get") returned 0x6cbd264c
	[0174.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x19e360, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_PutD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 16
	[0174.071] GetProcAddress (hModule=0x6cbd0000, lpProcName="QualifierSet_Put") returned 0x6cbd269a
	[0174.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x19e35c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 19
	[0174.073] GetProcAddress (hModule=0x6cbd0000, lpProcName="QualifierSet_Delete") returned 0x6cbd2629
	[0174.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x19e35c, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNames\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 21
	[0174.073] GetProcAddress (hModule=0x6cbd0000, lpProcName="QualifierSet_GetNames") returned 0x6cbd2668
	[0174.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x19e354, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 29
	[0174.074] GetProcAddress (hModule=0x6cbd0000, lpProcName="QualifierSet_BeginEnumeration") returned 0x6cbd2616
	[0174.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x19e360, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 17
	[0174.075] GetProcAddress (hModule=0x6cbd0000, lpProcName="QualifierSet_Next") returned 0x6cbd267e
	[0174.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x19e354, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 27
	[0174.077] GetProcAddress (hModule=0x6cbd0000, lpProcName="QualifierSet_EndEnumeration") returned 0x6cbd263c
	[0174.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x19e358, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 23
	[0174.077] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetCurrentApartmentType") returned 0x6cbd2435
	[0174.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x19e35c, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStubD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 20
	[0174.083] GetProcAddress (hModule=0x6cbd0000, lpProcName="GetDemultiplexedStub") returned 0x6cbd2313
	[0174.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x19e35c, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 21
	[0174.084] GetProcAddress (hModule=0x6cbd0000, lpProcName="CreateInstanceEnumWmi") returned 0x6cbd20db
	[0174.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x19e360, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmi6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 18
	[0174.087] GetProcAddress (hModule=0x6cbd0000, lpProcName="CreateClassEnumWmi") returned 0x6cbd2065
	[0174.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x19e364, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmiD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 12
	[0174.087] GetProcAddress (hModule=0x6cbd0000, lpProcName="ExecQueryWmi") returned 0x6cbd227b
	[0174.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x19e358, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmiD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 24
	[0174.093] GetProcAddress (hModule=0x6cbd0000, lpProcName="ExecNotificationQueryWmi") returned 0x6cbd2202
	[0174.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x19e364, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmi6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 14
	[0174.093] GetProcAddress (hModule=0x6cbd0000, lpProcName="PutInstanceWmi") returned 0x6cbd257a
	[0174.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x19e364, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi\x05D\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 11
	[0174.095] GetProcAddress (hModule=0x6cbd0000, lpProcName="PutClassWmi") returned 0x6cbd24fa
	[0174.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x19e358, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObjectD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 24
	[0174.095] GetProcAddress (hModule=0x6cbd0000, lpProcName="CloneEnumWbemClassObject") returned 0x6cbd1f40
	[0174.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x19e360, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmiD\x1a6l\x1b͹; «´k(æ\x19", lpUsedDefaultChar=0x0) returned 16
	[0174.096] GetProcAddress (hModule=0x6cbd0000, lpProcName="ConnectServerWmi") returned 0x6cbd1fc3
	[0174.105] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19eb98 | out: pAptType=0x19eb98*=1) returned 0x0
	[0174.106] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19eb9c | out: ppvObject=0x19eb9c*=0x0) returned 0x80004002
	[0174.106] IUnknown:Release (This=0x6d0ae4) returned 0x0
	[0174.128] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x19e7f4 | out: lpiid=0x19e7f4) returned 0x0
	[0174.133] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19e508 | out: ppv=0x19e508*=0x57a2dc8) returned 0x0
	[0174.578] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dc8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e720 | out: ppvObject=0x19e720*=0x0) returned 0x80004002
	[0174.578] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dc8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e734 | out: ppvObject=0x19e734*=0x703ae0) returned 0x0
	[0174.579] WbemDefPath:IUnknown:Release (This=0x57a2dc8) returned 0x0
	[0174.579] WbemDefPath:IUnknown:QueryInterface (in: This=0x703ae0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e354 | out: ppvObject=0x19e354*=0x703ae0) returned 0x0
	[0174.585] WbemDefPath:IUnknown:QueryInterface (in: This=0x703ae0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e310 | out: ppvObject=0x19e310*=0x0) returned 0x80004002
	[0174.585] WbemDefPath:IUnknown:QueryInterface (in: This=0x703ae0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19df04 | out: ppvObject=0x19df04*=0x0) returned 0x80004002
	[0174.585] WbemDefPath:IUnknown:AddRef (This=0x703ae0) returned 0x3
	[0174.585] WbemDefPath:IUnknown:QueryInterface (in: This=0x703ae0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19dc6c | out: ppvObject=0x19dc6c*=0x0) returned 0x80004002
	[0174.585] WbemDefPath:IUnknown:QueryInterface (in: This=0x703ae0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19dc1c | out: ppvObject=0x19dc1c*=0x0) returned 0x80004002
	[0174.585] WbemDefPath:IUnknown:QueryInterface (in: This=0x703ae0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dc28 | out: ppvObject=0x19dc28*=0x57a3920) returned 0x0
	[0174.586] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57a3920, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19dc30 | out: pCid=0x19dc30*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0174.586] WbemDefPath:IUnknown:Release (This=0x57a3920) returned 0x3
	[0174.586] CoGetContextToken (in: pToken=0x19dc88 | out: pToken=0x19dc88) returned 0x0
	[0174.586] CoGetContextToken (in: pToken=0x19e090 | out: pToken=0x19e090) returned 0x0
	[0174.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x703ae0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e120 | out: ppvObject=0x19e120*=0x0) returned 0x80004002
	[0174.586] WbemDefPath:IUnknown:Release (This=0x703ae0) returned 0x2
	[0174.586] WbemDefPath:IUnknown:Release (This=0x703ae0) returned 0x1
	[0174.586] CoGetContextToken (in: pToken=0x19ea18 | out: pToken=0x19ea18) returned 0x0
	[0174.586] CoGetContextToken (in: pToken=0x19e978 | out: pToken=0x19e978) returned 0x0
	[0174.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x703ae0, riid=0x19ea48*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19ea44 | out: ppvObject=0x19ea44*=0x703ae0) returned 0x0
	[0174.587] WbemDefPath:IUnknown:AddRef (This=0x703ae0) returned 0x3
	[0174.587] WbemDefPath:IUnknown:Release (This=0x703ae0) returned 0x2
	[0174.588] WbemDefPath:IWbemPath:SetText (This=0x703ae0, uMode=0x4, pszPath="//./root/cimv2") returned 0x0
	[0174.588] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2c4 | out: puCount=0x19f2c4*=0x2) returned 0x0
	[0174.588] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2c0*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c0*=0xf, pszText=0x0) returned 0x0
	[0174.589] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2c0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2c0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0174.590] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f250 | out: ppv=0x19f250*=0x6d0ae4) returned 0x0
	[0174.590] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f248 | out: pAptType=0x19f248*=1) returned 0x0
	[0174.590] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f24c | out: ppvObject=0x19f24c*=0x0) returned 0x80004002
	[0174.590] IUnknown:Release (This=0x6d0ae4) returned 0x0
	[0174.590] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x19f15c | out: lpiid=0x19f15c) returned 0x0
	[0174.591] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee70 | out: ppv=0x19ee70*=0x57a38f0) returned 0x0
	[0174.723] WbemLocator:IUnknown:QueryInterface (in: This=0x57a38f0, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f088 | out: ppvObject=0x19f088*=0x0) returned 0x80004002
	[0174.723] WbemLocator:IClassFactory:CreateInstance (in: This=0x57a38f0, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x57a2de8) returned 0x0
	[0174.723] WbemLocator:IUnknown:Release (This=0x57a38f0) returned 0x0
	[0174.723] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecbc | out: ppvObject=0x19ecbc*=0x57a2de8) returned 0x0
	[0174.723] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec78 | out: ppvObject=0x19ec78*=0x0) returned 0x80004002
	[0174.723] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e86c | out: ppvObject=0x19e86c*=0x0) returned 0x80004002
	[0174.724] WbemLocator:IUnknown:AddRef (This=0x57a2de8) returned 0x3
	[0174.724] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5d4 | out: ppvObject=0x19e5d4*=0x0) returned 0x80004002
	[0174.724] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e584 | out: ppvObject=0x19e584*=0x0) returned 0x80004002
	[0174.724] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e590 | out: ppvObject=0x19e590*=0x0) returned 0x80004002
	[0174.724] CoGetContextToken (in: pToken=0x19e5f0 | out: pToken=0x19e5f0) returned 0x0
	[0174.724] CoGetObjectContext (in: riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x57a39fc | out: ppv=0x57a39fc*=0x6d0ad8) returned 0x0
	[0174.724] CoGetContextToken (in: pToken=0x19e9f8 | out: pToken=0x19e9f8) returned 0x0
	[0174.724] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea88 | out: ppvObject=0x19ea88*=0x0) returned 0x80004002
	[0174.724] WbemLocator:IUnknown:Release (This=0x57a2de8) returned 0x2
	[0174.724] WbemLocator:IUnknown:Release (This=0x57a2de8) returned 0x1
	[0174.725] CoGetContextToken (in: pToken=0x19f068 | out: pToken=0x19f068) returned 0x0
	[0174.725] CoGetContextToken (in: pToken=0x19efc8 | out: pToken=0x19efc8) returned 0x0
	[0174.725] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x19f098*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f094 | out: ppvObject=0x19f094*=0x57a2de8) returned 0x0
	[0174.725] WbemLocator:IUnknown:AddRef (This=0x57a2de8) returned 0x3
	[0174.725] WbemLocator:IUnknown:Release (This=0x57a2de8) returned 0x2
	[0174.726] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f22c | out: puCount=0x19f22c*=0x2) returned 0x0
	[0174.726] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f228*=0x0, pszText=0x0 | out: puBuffLength=0x19f228*=0xf, pszText=0x0) returned 0x0
	[0174.726] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f228*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f228*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0174.727] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f104 | out: ppv=0x19f104*=0x57a2d08) returned 0x0
	[0174.727] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2d08, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f198 | out: ppNamespace=0x19f198*=0x7857a0) returned 0x0
	[0176.021] WbemLocator:IUnknown:QueryInterface (in: This=0x7857a0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f034 | out: ppvObject=0x19f034*=0x57b10d4) returned 0x0
	[0176.021] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b10d4, pProxy=0x7857a0, pAuthnSvc=0x19f084, pAuthzSvc=0x19f080, pServerPrincName=0x19f078, pAuthnLevel=0x19f07c, pImpLevel=0x19f06c, pAuthInfo=0x19f070, pCapabilites=0x19f074 | out: pAuthnSvc=0x19f084*=0xa, pAuthzSvc=0x19f080*=0x0, pServerPrincName=0x19f078, pAuthnLevel=0x19f07c*=0x6, pImpLevel=0x19f06c*=0x2, pAuthInfo=0x19f070, pCapabilites=0x19f074*=0x1) returned 0x0
	[0176.021] WbemLocator:IUnknown:Release (This=0x57b10d4) returned 0x1
	[0176.021] WbemLocator:IUnknown:QueryInterface (in: This=0x7857a0, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f028 | out: ppvObject=0x19f028*=0x57b10f8) returned 0x0
	[0176.022] WbemLocator:IUnknown:QueryInterface (in: This=0x7857a0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f024 | out: ppvObject=0x19f024*=0x57b10d4) returned 0x0
	[0176.022] WbemLocator:IClientSecurity:SetBlanket (This=0x57b10d4, pProxy=0x7857a0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0176.022] WbemLocator:IUnknown:Release (This=0x57b10d4) returned 0x2
	[0176.022] WbemLocator:IUnknown:Release (This=0x57b10f8) returned 0x1
	[0176.022] CoTaskMemFree (pv=0x57b7d80) 
	[0176.022] WbemLocator:IUnknown:Release (This=0x57a2d08) returned 0x0
	[0176.022] WbemLocator:IUnknown:QueryInterface (in: This=0x7857a0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec24 | out: ppvObject=0x19ec24*=0x57b10f8) returned 0x0
	[0176.022] WbemLocator:IUnknown:QueryInterface (in: This=0x57b10f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebe0 | out: ppvObject=0x19ebe0*=0x0) returned 0x80004002
	[0176.023] WbemLocator:IUnknown:QueryInterface (in: This=0x57b10f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9fc | out: ppvObject=0x19e9fc*=0x0) returned 0x80004002
	[0176.023] WbemLocator:IUnknown:QueryInterface (in: This=0x7857a0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7d4 | out: ppvObject=0x19e7d4*=0x0) returned 0x80004002
	[0176.024] WbemLocator:IUnknown:AddRef (This=0x57b10f8) returned 0x3
	[0176.024] WbemLocator:IUnknown:QueryInterface (in: This=0x57b10f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e53c | out: ppvObject=0x19e53c*=0x0) returned 0x80004002
	[0176.024] WbemLocator:IUnknown:QueryInterface (in: This=0x57b10f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4ec | out: ppvObject=0x19e4ec*=0x0) returned 0x80004002
	[0176.024] WbemLocator:IUnknown:QueryInterface (in: This=0x57b10f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4f8 | out: ppvObject=0x19e4f8*=0x57b1054) returned 0x0
	[0176.024] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1054, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e500 | out: pCid=0x19e500*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0176.024] WbemLocator:IUnknown:Release (This=0x57b1054) returned 0x3
	[0176.025] CoGetContextToken (in: pToken=0x19e558 | out: pToken=0x19e558) returned 0x0
	[0176.025] CoGetContextToken (in: pToken=0x19e960 | out: pToken=0x19e960) returned 0x0
	[0176.025] WbemLocator:IUnknown:QueryInterface (in: This=0x57b10f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9f0 | out: ppvObject=0x19e9f0*=0x57b10dc) returned 0x0
	[0176.025] WbemLocator:IRpcOptions:Query (in: This=0x57b10dc, pPrx=0x57b10f8, dwProperty=2, pdwValue=0x19ea18 | out: pdwValue=0x19ea18) returned 0x80004002
	[0176.025] WbemLocator:IUnknown:Release (This=0x57b10dc) returned 0x3
	[0176.025] WbemLocator:IUnknown:Release (This=0x57b10f8) returned 0x2
	[0176.025] CoGetContextToken (in: pToken=0x19ef38 | out: pToken=0x19ef38) returned 0x0
	[0176.025] CoGetContextToken (in: pToken=0x19ee98 | out: pToken=0x19ee98) returned 0x0
	[0176.025] WbemLocator:IUnknown:QueryInterface (in: This=0x57b10f8, riid=0x19ef68*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef64 | out: ppvObject=0x19ef64*=0x7857a0) returned 0x0
	[0176.025] WbemLocator:IUnknown:AddRef (This=0x7857a0) returned 0x4
	[0176.025] WbemLocator:IUnknown:Release (This=0x7857a0) returned 0x3
	[0176.026] WbemLocator:IUnknown:Release (This=0x7857a0) returned 0x2
	[0176.034] SysStringLen (param_1=0x0) returned 0x0
	[0176.035] CoGetContextToken (in: pToken=0x19ef30 | out: pToken=0x19ef30) returned 0x0
	[0176.035] WbemLocator:IUnknown:AddRef (This=0x57b10f8) returned 0x3
	[0176.036] WbemLocator:IUnknown:QueryInterface (in: This=0x57b10f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edc4 | out: ppvObject=0x19edc4*=0x57b10f8) returned 0x0
	[0176.036] WbemLocator:IUnknown:Release (This=0x57b10f8) returned 0x3
	[0176.036] WbemLocator:IUnknown:Release (This=0x57b10f8) returned 0x2
	[0176.036] CoGetContextToken (in: pToken=0x19f028 | out: pToken=0x19f028) returned 0x0
	[0176.036] WbemLocator:IUnknown:AddRef (This=0x7857a0) returned 0x3
	[0176.036] IWbemServices:ExecQuery (in: This=0x7857a0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x19f234 | out: ppEnum=0x19f234*=0x78b140) returned 0x0
	[0176.053] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f098 | out: ppvObject=0x19f098*=0x78b144) returned 0x0
	[0176.053] IClientSecurity:QueryBlanket (in: This=0x78b144, pProxy=0x78b140, pAuthnSvc=0x19f0e8, pAuthzSvc=0x19f0e4, pServerPrincName=0x19f0dc, pAuthnLevel=0x19f0e0, pImpLevel=0x19f0d0, pAuthInfo=0x19f0d4, pCapabilites=0x19f0d8 | out: pAuthnSvc=0x19f0e8*=0xa, pAuthzSvc=0x19f0e4*=0x0, pServerPrincName=0x19f0dc, pAuthnLevel=0x19f0e0*=0x6, pImpLevel=0x19f0d0*=0x2, pAuthInfo=0x19f0d4, pCapabilites=0x19f0d8*=0x1) returned 0x0
	[0176.053] IUnknown:Release (This=0x78b144) returned 0x1
	[0176.053] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f08c | out: ppvObject=0x19f08c*=0x57b03f8) returned 0x0
	[0176.053] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f088 | out: ppvObject=0x19f088*=0x78b144) returned 0x0
	[0176.054] IClientSecurity:SetBlanket (This=0x78b144, pProxy=0x78b140, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0176.093] IUnknown:Release (This=0x78b144) returned 0x2
	[0176.093] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x1
	[0176.093] CoTaskMemFree (pv=0x57b7ba0) 
	[0176.093] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec84 | out: ppvObject=0x19ec84*=0x57b03f8) returned 0x0
	[0176.093] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec40 | out: ppvObject=0x19ec40*=0x0) returned 0x80004002
	[0176.094] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea5c | out: ppvObject=0x19ea5c*=0x0) returned 0x80004002
	[0176.094] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0176.095] WbemLocator:IUnknown:AddRef (This=0x57b03f8) returned 0x3
	[0176.095] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e59c | out: ppvObject=0x19e59c*=0x0) returned 0x80004002
	[0176.095] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e54c | out: ppvObject=0x19e54c*=0x0) returned 0x80004002
	[0176.095] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e558 | out: ppvObject=0x19e558*=0x57b0354) returned 0x0
	[0176.095] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0354, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e560 | out: pCid=0x19e560*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0176.095] WbemLocator:IUnknown:Release (This=0x57b0354) returned 0x3
	[0176.095] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0176.095] CoGetContextToken (in: pToken=0x19e9c0 | out: pToken=0x19e9c0) returned 0x0
	[0176.095] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea50 | out: ppvObject=0x19ea50*=0x57b03dc) returned 0x0
	[0176.095] WbemLocator:IRpcOptions:Query (in: This=0x57b03dc, pPrx=0x57b03f8, dwProperty=2, pdwValue=0x19ea78 | out: pdwValue=0x19ea78) returned 0x80004002
	[0176.095] WbemLocator:IUnknown:Release (This=0x57b03dc) returned 0x3
	[0176.096] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x2
	[0176.096] CoGetContextToken (in: pToken=0x19ef98 | out: pToken=0x19ef98) returned 0x0
	[0176.096] CoGetContextToken (in: pToken=0x19eef8 | out: pToken=0x19eef8) returned 0x0
	[0176.096] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x19efc8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efc4 | out: ppvObject=0x19efc4*=0x78b140) returned 0x0
	[0176.096] IUnknown:AddRef (This=0x78b140) returned 0x4
	[0176.096] IUnknown:Release (This=0x78b140) returned 0x3
	[0176.096] IUnknown:Release (This=0x78b140) returned 0x2
	[0176.096] WbemLocator:IUnknown:Release (This=0x7857a0) returned 0x2
	[0176.096] SysStringLen (param_1=0x0) returned 0x0
	[0176.096] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f280 | out: puCount=0x19f280*=0x2) returned 0x0
	[0176.096] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f27c*=0x0, pszText=0x0 | out: puBuffLength=0x19f27c*=0xf, pszText=0x0) returned 0x0
	[0176.096] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f27c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f27c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0176.096] CoGetContextToken (in: pToken=0x19f0d0 | out: pToken=0x19f0d0) returned 0x0
	[0176.096] IUnknown:AddRef (This=0x78b140) returned 0x3
	[0176.096] IEnumWbemClassObject:Clone (in: This=0x78b140, ppEnum=0x19f28c | out: ppEnum=0x19f28c*=0x78a330) returned 0x0
	[0176.098] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f150 | out: ppvObject=0x19f150*=0x78a334) returned 0x0
	[0176.098] IClientSecurity:QueryBlanket (in: This=0x78a334, pProxy=0x78a330, pAuthnSvc=0x19f1a0, pAuthzSvc=0x19f19c, pServerPrincName=0x19f194, pAuthnLevel=0x19f198, pImpLevel=0x19f188, pAuthInfo=0x19f18c, pCapabilites=0x19f190 | out: pAuthnSvc=0x19f1a0*=0xa, pAuthzSvc=0x19f19c*=0x0, pServerPrincName=0x19f194, pAuthnLevel=0x19f198*=0x6, pImpLevel=0x19f188*=0x2, pAuthInfo=0x19f18c, pCapabilites=0x19f190*=0x1) returned 0x0
	[0176.098] IUnknown:Release (This=0x78a334) returned 0x1
	[0176.098] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f144 | out: ppvObject=0x19f144*=0x57b0af8) returned 0x0
	[0176.098] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f140 | out: ppvObject=0x19f140*=0x78a334) returned 0x0
	[0176.099] IClientSecurity:SetBlanket (This=0x78a334, pProxy=0x78a330, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0176.129] IUnknown:Release (This=0x78a334) returned 0x2
	[0176.129] WbemLocator:IUnknown:Release (This=0x57b0af8) returned 0x1
	[0176.129] CoTaskMemFree (pv=0x57b8050) 
	[0176.129] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed2c | out: ppvObject=0x19ed2c*=0x57b0af8) returned 0x0
	[0176.129] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ece8 | out: ppvObject=0x19ece8*=0x0) returned 0x80004002
	[0176.130] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb04 | out: ppvObject=0x19eb04*=0x0) returned 0x80004002
	[0176.130] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8dc | out: ppvObject=0x19e8dc*=0x0) returned 0x80004002
	[0176.131] WbemLocator:IUnknown:AddRef (This=0x57b0af8) returned 0x3
	[0176.131] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e644 | out: ppvObject=0x19e644*=0x0) returned 0x80004002
	[0176.131] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5f4 | out: ppvObject=0x19e5f4*=0x0) returned 0x80004002
	[0176.131] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x57b0a54) returned 0x0
	[0176.131] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0a54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e608 | out: pCid=0x19e608*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0176.131] WbemLocator:IUnknown:Release (This=0x57b0a54) returned 0x3
	[0176.131] CoGetContextToken (in: pToken=0x19e660 | out: pToken=0x19e660) returned 0x0
	[0176.131] CoGetContextToken (in: pToken=0x19ea68 | out: pToken=0x19ea68) returned 0x0
	[0176.131] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eaf8 | out: ppvObject=0x19eaf8*=0x57b0adc) returned 0x0
	[0176.131] WbemLocator:IRpcOptions:Query (in: This=0x57b0adc, pPrx=0x57b0af8, dwProperty=2, pdwValue=0x19eb20 | out: pdwValue=0x19eb20) returned 0x80004002
	[0176.131] WbemLocator:IUnknown:Release (This=0x57b0adc) returned 0x3
	[0176.131] WbemLocator:IUnknown:Release (This=0x57b0af8) returned 0x2
	[0176.131] CoGetContextToken (in: pToken=0x19f040 | out: pToken=0x19f040) returned 0x0
	[0176.131] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0176.131] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x19f070*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f06c | out: ppvObject=0x19f06c*=0x78a330) returned 0x0
	[0176.131] IUnknown:AddRef (This=0x78a330) returned 0x4
	[0176.131] IUnknown:Release (This=0x78a330) returned 0x3
	[0176.131] IUnknown:Release (This=0x78a330) returned 0x2
	[0176.131] IUnknown:Release (This=0x78b140) returned 0x2
	[0176.131] SysStringLen (param_1=0x0) returned 0x0
	[0176.132] IEnumWbemClassObject:Reset (This=0x78a330) returned 0x0
	[0176.135] CoTaskMemAlloc (cb=0x4) returned 0x57a2e78
	[0176.136] IEnumWbemClassObject:Next (in: This=0x78a330, lTimeout=-1, uCount=0x1, apObjects=0x57a2e78, puReturned=0x2893e6c | out: apObjects=0x57a2e78*=0x57b7330, puReturned=0x2893e6c*=0x1) returned 0x0
	[0186.147] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e8f0 | out: ppvObject=0x19e8f0*=0x57b7330) returned 0x0
	[0186.147] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8ac | out: ppvObject=0x19e8ac*=0x0) returned 0x80004002
	[0186.147] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e6cc | out: ppvObject=0x19e6cc*=0x0) returned 0x80004002
	[0186.147] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4a4 | out: ppvObject=0x19e4a4*=0x0) returned 0x80004002
	[0186.148] IUnknown:AddRef (This=0x57b7330) returned 0x3
	[0186.148] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e20c | out: ppvObject=0x19e20c*=0x0) returned 0x80004002
	[0186.148] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1bc | out: ppvObject=0x19e1bc*=0x0) returned 0x80004002
	[0186.148] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e1c8 | out: ppvObject=0x19e1c8*=0x57b7334) returned 0x0
	[0186.148] IMarshal:GetUnmarshalClass (in: This=0x57b7334, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e1d0 | out: pCid=0x19e1d0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0186.148] IUnknown:Release (This=0x57b7334) returned 0x3
	[0186.148] CoGetContextToken (in: pToken=0x19e228 | out: pToken=0x19e228) returned 0x0
	[0186.149] CoGetContextToken (in: pToken=0x19e630 | out: pToken=0x19e630) returned 0x0
	[0186.149] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6c0 | out: ppvObject=0x19e6c0*=0x0) returned 0x80004002
	[0186.149] IUnknown:Release (This=0x57b7330) returned 0x2
	[0186.149] CoGetContextToken (in: pToken=0x19ec00 | out: pToken=0x19ec00) returned 0x0
	[0186.149] CoGetContextToken (in: pToken=0x19eb60 | out: pToken=0x19eb60) returned 0x0
	[0186.149] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x19ec30*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec2c | out: ppvObject=0x19ec2c*=0x57b7330) returned 0x0
	[0186.149] IUnknown:AddRef (This=0x57b7330) returned 0x4
	[0186.149] IUnknown:Release (This=0x57b7330) returned 0x3
	[0186.150] IUnknown:Release (This=0x57b7330) returned 0x2
	[0186.150] CoTaskMemFree (pv=0x57a2e78) 
	[0186.150] CoGetContextToken (in: pToken=0x19ef68 | out: pToken=0x19ef68) returned 0x0
	[0186.150] IUnknown:AddRef (This=0x57b7330) returned 0x3
	[0186.154] IWbemClassObject:Get (in: This=0x57b7330, wszName="__GENUS", lFlags=0, pVal=0x19f27c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2fc*=0, plFlavor=0x19f2f8*=0 | out: pVal=0x19f27c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f2fc*=3, plFlavor=0x19f2f8*=64) returned 0x0
	[0186.155] IWbemClassObject:Get (in: This=0x57b7330, wszName="__PATH", lFlags=0, pVal=0x19f260*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2e4*=0, plFlavor=0x19f2e0*=0 | out: pVal=0x19f260*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x19f2e4*=8, plFlavor=0x19f2e0*=64) returned 0x0
	[0186.158] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0186.158] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0186.158] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f28c | out: ppv=0x19f28c*=0x6d0ae4) returned 0x0
	[0186.159] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f284 | out: pAptType=0x19f284*=1) returned 0x0
	[0186.159] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f288 | out: ppvObject=0x19f288*=0x0) returned 0x80004002
	[0186.159] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.163] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebf8 | out: ppv=0x19ebf8*=0x57a2e18) returned 0x0
	[0186.164] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e18, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee10 | out: ppvObject=0x19ee10*=0x0) returned 0x80004002
	[0186.164] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e18, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee24 | out: ppvObject=0x19ee24*=0x703680) returned 0x0
	[0186.164] WbemDefPath:IUnknown:Release (This=0x57a2e18) returned 0x0
	[0186.164] WbemDefPath:IUnknown:QueryInterface (in: This=0x703680, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea44 | out: ppvObject=0x19ea44*=0x703680) returned 0x0
	[0186.165] WbemDefPath:IUnknown:QueryInterface (in: This=0x703680, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea00 | out: ppvObject=0x19ea00*=0x0) returned 0x80004002
	[0186.165] WbemDefPath:IUnknown:QueryInterface (in: This=0x703680, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5f4 | out: ppvObject=0x19e5f4*=0x0) returned 0x80004002
	[0186.165] WbemDefPath:IUnknown:AddRef (This=0x703680) returned 0x3
	[0186.165] WbemDefPath:IUnknown:QueryInterface (in: This=0x703680, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e35c | out: ppvObject=0x19e35c*=0x0) returned 0x80004002
	[0186.165] WbemDefPath:IUnknown:QueryInterface (in: This=0x703680, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e30c | out: ppvObject=0x19e30c*=0x0) returned 0x80004002
	[0186.165] WbemDefPath:IUnknown:QueryInterface (in: This=0x703680, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e318 | out: ppvObject=0x19e318*=0x57c19d0) returned 0x0
	[0186.165] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c19d0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e320 | out: pCid=0x19e320*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.165] WbemDefPath:IUnknown:Release (This=0x57c19d0) returned 0x3
	[0186.165] CoGetContextToken (in: pToken=0x19e378 | out: pToken=0x19e378) returned 0x0
	[0186.165] CoGetContextToken (in: pToken=0x19e780 | out: pToken=0x19e780) returned 0x0
	[0186.165] WbemDefPath:IUnknown:QueryInterface (in: This=0x703680, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e810 | out: ppvObject=0x19e810*=0x0) returned 0x80004002
	[0186.165] WbemDefPath:IUnknown:Release (This=0x703680) returned 0x2
	[0186.165] WbemDefPath:IUnknown:Release (This=0x703680) returned 0x1
	[0186.166] CoGetContextToken (in: pToken=0x19f108 | out: pToken=0x19f108) returned 0x0
	[0186.166] CoGetContextToken (in: pToken=0x19f068 | out: pToken=0x19f068) returned 0x0
	[0186.166] WbemDefPath:IUnknown:QueryInterface (in: This=0x703680, riid=0x19f138*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f134 | out: ppvObject=0x19f134*=0x703680) returned 0x0
	[0186.166] WbemDefPath:IUnknown:AddRef (This=0x703680) returned 0x3
	[0186.166] WbemDefPath:IUnknown:Release (This=0x703680) returned 0x2
	[0186.166] WbemDefPath:IWbemPath:SetText (This=0x703680, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0
	[0186.166] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2b8 | out: puCount=0x19f2b8*=0x2) returned 0x0
	[0186.167] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b4*=0xf, pszText=0x0) returned 0x0
	[0186.167] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0186.168] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f284 | out: puCount=0x19f284*=0x2) returned 0x0
	[0186.168] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f280*=0x0, pszText=0x0 | out: puBuffLength=0x19f280*=0xf, pszText=0x0) returned 0x0
	[0186.168] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f280*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f280*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0186.168] IWbemClassObject:Get (in: This=0x57b7330, wszName="Name", lFlags=0, pVal=0x19f280*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2894714*=0, plFlavor=0x2894718*=0 | out: pVal=0x19f280*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x2894714*=8, plFlavor=0x2894718*=0) returned 0x0
	[0186.168] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0186.168] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0186.168] IWbemClassObject:Get (in: This=0x57b7330, wszName="Name", lFlags=0, pVal=0x19f288*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2894714*=8, plFlavor=0x2894718*=0 | out: pVal=0x19f288*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x2894714*=8, plFlavor=0x2894718*=0) returned 0x0
	[0186.172] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0186.172] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0186.174] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f284 | out: puCount=0x19f284*=0x2) returned 0x0
	[0186.174] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f280*=0x0, pszText=0x0 | out: puBuffLength=0x19f280*=0xf, pszText=0x0) returned 0x0
	[0186.174] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f280*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f280*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0186.174] IWbemClassObject:Get (in: This=0x57b7330, wszName="NumberOfCores", lFlags=0, pVal=0x19f280*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2894820*=0, plFlavor=0x2894824*=0 | out: pVal=0x19f280*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x2894820*=19, plFlavor=0x2894824*=0) returned 0x0
	[0186.174] IWbemClassObject:Get (in: This=0x57b7330, wszName="NumberOfCores", lFlags=0, pVal=0x19f288*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2894820*=19, plFlavor=0x2894824*=0 | out: pVal=0x19f288*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x2894820*=19, plFlavor=0x2894824*=0) returned 0x0
	[0186.209] CoTaskMemAlloc (cb=0x4) returned 0x57a2dc8
	[0186.209] IEnumWbemClassObject:Next (in: This=0x78a330, lTimeout=-1, uCount=0x1, apObjects=0x57a2dc8, puReturned=0x2893e6c | out: apObjects=0x57a2dc8*=0x0, puReturned=0x2893e6c*=0x0) returned 0x1
	[0186.211] CoTaskMemFree (pv=0x57a2dc8) 
	[0186.211] CoGetContextToken (in: pToken=0x19f1b8 | out: pToken=0x19f1b8) returned 0x0
	[0186.211] WbemLocator:IUnknown:Release (This=0x57b0af8) returned 0x1
	[0186.212] IUnknown:Release (This=0x78a330) returned 0x0
	[0186.215] CoGetContextToken (in: pToken=0x19f1b8 | out: pToken=0x19f1b8) returned 0x0
	[0186.215] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x1
	[0186.215] IUnknown:Release (This=0x78b140) returned 0x0
	[0186.260] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\WOW6432Node\\Clients\\StartMenuInternet", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f304 | out: phkResult=0x19f304*=0x6d0) returned 0x0
	[0186.262] RegQueryInfoKeyW (in: hKey=0x6d0, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x19f32c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x19f328, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x19f32c*=0x1, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x19f328*=0x1, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.262] RegEnumKeyExW (in: hKey=0x6d0, dwIndex=0x0, lpName=0x2894bf0, lpcchName=0x19f348, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEXPLORE.EXE", lpcchName=0x19f348, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.262] RegOpenKeyExW (in: hKey=0x6d0, lpSubKey="IEXPLORE.EXE", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f304 | out: phkResult=0x19f304*=0x6d4) returned 0x0
	[0186.262] RegQueryValueExW (in: hKey=0x6d4, lpValueName=0x0, lpReserved=0x0, lpType=0x19f324, lpData=0x0, lpcbData=0x19f320*=0x0 | out: lpType=0x19f324*=0x1, lpData=0x0, lpcbData=0x19f320*=0x24) returned 0x0
	[0186.262] RegQueryValueExW (in: hKey=0x6d4, lpValueName=0x0, lpReserved=0x0, lpType=0x19f324, lpData=0x2894f1c, lpcbData=0x19f320*=0x24 | out: lpType=0x19f324*=0x1, lpData="Internet Explorer", lpcbData=0x19f320*=0x24) returned 0x0
	[0186.263] RegOpenKeyExW (in: hKey=0x6d4, lpSubKey="shell\\open\\command", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f304 | out: phkResult=0x19f304*=0x6d8) returned 0x0
	[0186.263] RegQueryValueExW (in: hKey=0x6d8, lpValueName=0x0, lpReserved=0x0, lpType=0x19f324, lpData=0x0, lpcbData=0x19f320*=0x0 | out: lpType=0x19f324*=0x1, lpData=0x0, lpcbData=0x19f320*=0x60) returned 0x0
	[0186.263] RegQueryValueExW (in: hKey=0x6d8, lpValueName=0x0, lpReserved=0x0, lpType=0x19f324, lpData=0x2895104, lpcbData=0x19f320*=0x60 | out: lpType=0x19f324*=0x1, lpData="C:\\Program Files\\Internet Explorer\\iexplore.exe", lpcbData=0x19f320*=0x60) returned 0x0
	[0186.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe", nBufferLength=0x105, lpBuffer=0x19ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\iexplore.exe", lpFilePart=0x0) returned 0x2f
	[0186.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f260) returned 1
	[0186.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f2dc | out: lpFileInformation=0x19f2dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33517c70, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33517c70, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33517c70, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc74c0)) returned 1
	[0186.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f25c) returned 1
	[0186.266] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\iexplore.exe", lpdwHandle=0x19f350 | out: lpdwHandle=0x19f350) returned 0xba4
	[0186.422] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\iexplore.exe", dwHandle=0x0, dwLen=0xba4, lpData=0x28952ac | out: lpData=0x28952ac) returned 1
	[0186.426] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f324, puLen=0x19f320 | out: lplpBuffer=0x19f324*=0x2895878, puLen=0x19f320) returned 1
	[0186.428] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x2895364, puLen=0x19f2a0) returned 1
	[0186.428] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x28953b8, puLen=0x19f2a0) returned 1
	[0186.428] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x28953fc, puLen=0x19f2a0) returned 1
	[0186.428] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x289546c, puLen=0x19f2a0) returned 1
	[0186.429] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x28954a4, puLen=0x19f2a0) returned 1
	[0186.429] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x2895528, puLen=0x19f2a0) returned 1
	[0186.429] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x289556c, puLen=0x19f2a0) returned 1
	[0186.429] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x28955b4, puLen=0x19f2a0) returned 1
	[0186.429] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x0, puLen=0x19f2a0) returned 0
	[0186.429] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x0, puLen=0x19f2a0) returned 0
	[0186.429] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x0, puLen=0x19f2a0) returned 0
	[0186.429] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f2a4, puLen=0x19f2a0 | out: lplpBuffer=0x19f2a4*=0x0, puLen=0x19f2a0) returned 0
	[0186.429] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f298, puLen=0x19f294 | out: lplpBuffer=0x19f298*=0x2895878, puLen=0x19f294) returned 1
	[0186.429] VerLanguageNameW (in: wLang=0x409, szLang=0x19f028, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0186.459] VerQueryValueW (in: pBlock=0x28952ac, lpSubBlock="\\", lplpBuffer=0x19f2a8, puLen=0x19f2a4 | out: lplpBuffer=0x19f2a8*=0x28952d4, puLen=0x19f2a4) returned 1
	[0186.516] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6dc) returned 0x0
	[0186.516] RegQueryInfoKeyW (in: hKey=0x6dc, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x19f328, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x19f324, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x19f328*=0x2c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x19f324*=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x0, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="AddressBook", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x1, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Connection Manager", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x2, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DirectDrawEx", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x3, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DXM_Runtime", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x4, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Fontcore", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x5, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE40", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x6, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE4Data", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x7, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE5BAKEX", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x8, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEData", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x9, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MobileOptionPack", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0xa, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MPlayer2", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.517] CoTaskMemFree (pv=0x0) 
	[0186.517] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0xb, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="SchedulingAgent", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0xc, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="WIC", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0xd, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{0FA68574-690B-4B00-89AA-B28946231449}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0xe, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0xf, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x10, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x11, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x12, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x13, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x14, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.518] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x15, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.518] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x16, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x17, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x18, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x19, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{65e650ff-30be-469d-b63a-418d71ea1765}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x1a, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x1b, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x1c, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-008C-0000-0000-0000000FF1CE}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x1d, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-008C-0409-0000-0000000FF1CE}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x1e, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x1f, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{B175520C-86A2-35A7-8619-86DC379688B9}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.519] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x20, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.519] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x21, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x22, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x23, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x24, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x25, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x26, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x27, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x28, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x29, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x2a, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.520] RegEnumKeyExW (in: hKey=0x6dc, dwIndex=0x2b, lpName=0x2897138, lpcchName=0x19f344, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpcchName=0x19f344, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0186.520] CoTaskMemFree (pv=0x0) 
	[0186.521] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="AddressBook", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.521] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.521] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.521] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.521] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="Connection Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.521] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.521] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.521] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.521] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="DirectDrawEx", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.521] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.521] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.521] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.521] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="DXM_Runtime", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.522] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="Fontcore", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.522] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="IE40", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.522] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="IE4Data", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.522] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="IE5BAKEX", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.522] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.522] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="IEData", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.523] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.523] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.523] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.523] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="MobileOptionPack", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.523] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.523] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.523] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.523] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="MPlayer2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.523] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.523] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.523] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.523] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="SchedulingAgent", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.524] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.524] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.524] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.524] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="WIC", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.524] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.524] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.524] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.524] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{0FA68574-690B-4B00-89AA-B28946231449}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.524] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x7e) returned 0x0
	[0186.524] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x289965c, lpcbData=0x19f31c*=0x7e | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508", lpcbData=0x19f31c*=0x7e) returned 0x0
	[0186.524] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x18) returned 0x0
	[0186.524] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28997c8, lpcbData=0x19f31c*=0x18 | out: lpType=0x19f320*=0x1, lpData="14.25.28508", lpcbData=0x19f31c*=0x18) returned 0x0
	[0186.576] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.576] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.576] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x76) returned 0x0
	[0186.576] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x289ef28, lpcbData=0x19f31c*=0x76 | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpcbData=0x19f31c*=0x76) returned 0x0
	[0186.576] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.576] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x289f084, lpcbData=0x19f31c*=0x16 | out: lpType=0x19f320*=0x1, lpData="12.0.21005", lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.576] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.577] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.577] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.577] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.577] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.577] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.577] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.577] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.577] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.577] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.577] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.577] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.577] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.577] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.577] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.577] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.577] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.578] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.578] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.578] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.578] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.578] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.578] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.578] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x78) returned 0x0
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a00a8, lpcbData=0x19f31c*=0x78 | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508", lpcbData=0x19f31c*=0x78) returned 0x0
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x18) returned 0x0
	[0186.578] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a0204, lpcbData=0x19f31c*=0x18 | out: lpType=0x19f320*=0x1, lpData="14.25.28508", lpcbData=0x19f31c*=0x18) returned 0x0
	[0186.579] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.579] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.579] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x7a) returned 0x0
	[0186.579] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a057c, lpcbData=0x19f31c*=0x7a | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpcbData=0x19f31c*=0x7a) returned 0x0
	[0186.579] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x1a) returned 0x0
	[0186.579] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a06e0, lpcbData=0x19f31c*=0x1a | out: lpType=0x19f320*=0x1, lpData="11.0.61030.0", lpcbData=0x19f31c*=0x1a) returned 0x0
	[0186.579] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.579] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{3c3aafc8-d898-43ec-998f-965ffdae065a}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.579] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x7a) returned 0x0
	[0186.579] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a0a64, lpcbData=0x19f31c*=0x7a | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpcbData=0x19f31c*=0x7a) returned 0x0
	[0186.579] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x1a) returned 0x0
	[0186.580] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a0bc8, lpcbData=0x19f31c*=0x1a | out: lpType=0x19f320*=0x1, lpData="12.0.30501.0", lpcbData=0x19f31c*=0x1a) returned 0x0
	[0186.580] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.580] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{65e650ff-30be-469d-b63a-418d71ea1765}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.580] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x86) returned 0x0
	[0186.580] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a0f78, lpcbData=0x19f31c*=0x86 | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508", lpcbData=0x19f31c*=0x86) returned 0x0
	[0186.580] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x1c) returned 0x0
	[0186.580] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a10f4, lpcbData=0x19f31c*=0x1c | out: lpType=0x19f320*=0x1, lpData="14.25.28508.3", lpcbData=0x19f31c*=0x1c) returned 0x0
	[0186.580] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.580] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.580] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x86) returned 0x0
	[0186.581] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a1488, lpcbData=0x19f31c*=0x86 | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508", lpcbData=0x19f31c*=0x86) returned 0x0
	[0186.581] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x1c) returned 0x0
	[0186.581] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a1604, lpcbData=0x19f31c*=0x1c | out: lpType=0x19f320*=0x1, lpData="14.25.28508.3", lpcbData=0x19f31c*=0x1c) returned 0x0
	[0186.581] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.581] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.581] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x54) returned 0x0
	[0186.581] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a1998, lpcbData=0x19f31c*=0x54 | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2005 Redistributable", lpcbData=0x19f31c*=0x54) returned 0x0
	[0186.581] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x14) returned 0x0
	[0186.581] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a1aac, lpcbData=0x19f31c*=0x14 | out: lpType=0x19f320*=0x1, lpData="8.0.61001", lpcbData=0x19f31c*=0x14) returned 0x0
	[0186.582] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.582] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{90160000-008C-0000-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.582] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x5e) returned 0x0
	[0186.582] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a1df4, lpcbData=0x19f31c*=0x5e | out: lpType=0x19f320*=0x1, lpData="Office 16 Click-to-Run Extensibility Component", lpcbData=0x19f31c*=0x5e) returned 0x0
	[0186.582] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x1e) returned 0x0
	[0186.582] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a1f20, lpcbData=0x19f31c*=0x1e | out: lpType=0x19f320*=0x1, lpData="16.0.4266.1003", lpcbData=0x19f31c*=0x1e) returned 0x0
	[0186.582] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.582] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{90160000-008C-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.582] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x5c) returned 0x0
	[0186.582] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a22e0, lpcbData=0x19f31c*=0x5c | out: lpType=0x19f320*=0x1, lpData="Office 16 Click-to-Run Localization Component", lpcbData=0x19f31c*=0x5c) returned 0x0
	[0186.582] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x1e) returned 0x0
	[0186.582] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a2404, lpcbData=0x19f31c*=0x1e | out: lpType=0x19f320*=0x1, lpData="16.0.4266.1003", lpcbData=0x19f31c*=0x1e) returned 0x0
	[0186.582] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.583] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.583] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x7e) returned 0x0
	[0186.583] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a2778, lpcbData=0x19f31c*=0x7e | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpcbData=0x19f31c*=0x7e) returned 0x0
	[0186.583] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x1e) returned 0x0
	[0186.583] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a28e4, lpcbData=0x19f31c*=0x1e | out: lpType=0x19f320*=0x1, lpData="9.0.30729.6161", lpcbData=0x19f31c*=0x1e) returned 0x0
	[0186.583] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.583] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{B175520C-86A2-35A7-8619-86DC379688B9}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.583] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x7c) returned 0x0
	[0186.583] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a2c78, lpcbData=0x19f31c*=0x7c | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpcbData=0x19f31c*=0x7c) returned 0x0
	[0186.583] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.583] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a2ddc, lpcbData=0x19f31c*=0x16 | out: lpType=0x19f320*=0x1, lpData="11.0.61030", lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.583] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.584] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.584] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x76) returned 0x0
	[0186.584] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a3158, lpcbData=0x19f31c*=0x76 | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpcbData=0x19f31c*=0x76) returned 0x0
	[0186.584] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.584] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a32b4, lpcbData=0x19f31c*=0x16 | out: lpType=0x19f320*=0x1, lpData="11.0.61030", lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.585] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.585] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.585] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x7a) returned 0x0
	[0186.585] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a3628, lpcbData=0x19f31c*=0x7a | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpcbData=0x19f31c*=0x7a) returned 0x0
	[0186.585] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x1a) returned 0x0
	[0186.585] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a378c, lpcbData=0x19f31c*=0x1a | out: lpType=0x19f320*=0x1, lpData="11.0.61030.0", lpcbData=0x19f31c*=0x1a) returned 0x0
	[0186.585] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.585] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.585] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x7a) returned 0x0
	[0186.585] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a3b10, lpcbData=0x19f31c*=0x7a | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpcbData=0x19f31c*=0x7a) returned 0x0
	[0186.585] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x1a) returned 0x0
	[0186.585] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a3c74, lpcbData=0x19f31c*=0x1a | out: lpType=0x19f320*=0x1, lpData="12.0.30501.0", lpcbData=0x19f31c*=0x1a) returned 0x0
	[0186.585] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.585] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.585] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x78) returned 0x0
	[0186.586] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a3ff8, lpcbData=0x19f31c*=0x78 | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219", lpcbData=0x19f31c*=0x78) returned 0x0
	[0186.586] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.586] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a4154, lpcbData=0x19f31c*=0x16 | out: lpType=0x19f320*=0x1, lpData="10.0.40219", lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.586] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.586] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.586] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.586] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.586] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.586] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.586] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.586] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.586] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.586] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.586] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.586] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.586] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.587] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.587] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.587] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.587] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.587] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.587] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.587] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.587] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.587] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.587] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.587] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.587] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.587] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.587] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.587] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x0, lpData=0x0, lpcbData=0x19f31c*=0x0) returned 0x2
	[0186.587] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.588] RegOpenKeyExW (in: hKey=0x6dc, lpSubKey="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f300 | out: phkResult=0x19f300*=0x6e8) returned 0x0
	[0186.588] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x7c) returned 0x0
	[0186.588] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f320, lpData=0x28a517c, lpcbData=0x19f31c*=0x7c | out: lpType=0x19f320*=0x1, lpData="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpcbData=0x19f31c*=0x7c) returned 0x0
	[0186.588] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x0, lpcbData=0x19f31c*=0x0 | out: lpType=0x19f320*=0x1, lpData=0x0, lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.588] RegQueryValueExW (in: hKey=0x6e8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f320, lpData=0x28a52e0, lpcbData=0x19f31c*=0x16 | out: lpType=0x19f320*=0x1, lpData="12.0.21005", lpcbData=0x19f31c*=0x16) returned 0x0
	[0186.588] RegCloseKey (hKey=0x6e8) returned 0x0
	[0186.588] RegCloseKey (hKey=0x6dc) returned 0x0
	[0186.613] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2b4 | out: ppv=0x19f2b4*=0x6d0ae4) returned 0x0
	[0186.613] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2ac | out: pAptType=0x19f2ac*=1) returned 0x0
	[0186.613] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x0) returned 0x80004002
	[0186.613] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.614] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec20 | out: ppv=0x19ec20*=0x57a2e88) returned 0x0
	[0186.614] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e88, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee38 | out: ppvObject=0x19ee38*=0x0) returned 0x80004002
	[0186.614] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e88, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee4c | out: ppvObject=0x19ee4c*=0x703bc0) returned 0x0
	[0186.615] WbemDefPath:IUnknown:Release (This=0x57a2e88) returned 0x0
	[0186.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x703bc0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x703bc0) returned 0x0
	[0186.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x703bc0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x0) returned 0x80004002
	[0186.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x703bc0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e61c | out: ppvObject=0x19e61c*=0x0) returned 0x80004002
	[0186.615] WbemDefPath:IUnknown:AddRef (This=0x703bc0) returned 0x3
	[0186.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x703bc0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e384 | out: ppvObject=0x19e384*=0x0) returned 0x80004002
	[0186.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x703bc0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e334 | out: ppvObject=0x19e334*=0x0) returned 0x80004002
	[0186.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x703bc0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e340 | out: ppvObject=0x19e340*=0x57c1b80) returned 0x0
	[0186.615] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c1b80, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e348 | out: pCid=0x19e348*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.615] WbemDefPath:IUnknown:Release (This=0x57c1b80) returned 0x3
	[0186.615] CoGetContextToken (in: pToken=0x19e3a0 | out: pToken=0x19e3a0) returned 0x0
	[0186.615] CoGetContextToken (in: pToken=0x19e7a8 | out: pToken=0x19e7a8) returned 0x0
	[0186.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x703bc0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e838 | out: ppvObject=0x19e838*=0x0) returned 0x80004002
	[0186.615] WbemDefPath:IUnknown:Release (This=0x703bc0) returned 0x2
	[0186.615] WbemDefPath:IUnknown:Release (This=0x703bc0) returned 0x1
	[0186.615] CoGetContextToken (in: pToken=0x19f130 | out: pToken=0x19f130) returned 0x0
	[0186.615] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0186.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x703bc0, riid=0x19f160*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x703bc0) returned 0x0
	[0186.615] WbemDefPath:IUnknown:AddRef (This=0x703bc0) returned 0x3
	[0186.615] WbemDefPath:IUnknown:Release (This=0x703bc0) returned 0x2
	[0186.616] WbemDefPath:IWbemPath:SetText (This=0x703bc0, uMode=0x4, pszPath="ROOT\\SecurityCenter2") returned 0x0
	[0186.616] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703bc0, puCount=0x19f2dc | out: puCount=0x19f2dc*=0x2) returned 0x0
	[0186.616] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f2d8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2d8*=0x19, pszText=0x0) returned 0x0
	[0186.616] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f2d8*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2d8*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.616] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703bc0, puCount=0x19f2c8 | out: puCount=0x19f2c8*=0x2) returned 0x0
	[0186.616] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f2c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c4*=0x19, pszText=0x0) returned 0x0
	[0186.616] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f2c4*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2c4*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.616] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f25c | out: ppv=0x19f25c*=0x6d0ae4) returned 0x0
	[0186.616] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f254 | out: pAptType=0x19f254*=1) returned 0x0
	[0186.616] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f258 | out: ppvObject=0x19f258*=0x0) returned 0x80004002
	[0186.616] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.617] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee78 | out: ppv=0x19ee78*=0x57c0d40) returned 0x0
	[0186.617] WbemLocator:IUnknown:QueryInterface (in: This=0x57c0d40, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f090 | out: ppvObject=0x19f090*=0x0) returned 0x80004002
	[0186.617] WbemLocator:IClassFactory:CreateInstance (in: This=0x57c0d40, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x57a2cd8) returned 0x0
	[0186.617] WbemLocator:IUnknown:Release (This=0x57c0d40) returned 0x0
	[0186.617] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x57a2cd8) returned 0x0
	[0186.617] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec80 | out: ppvObject=0x19ec80*=0x0) returned 0x80004002
	[0186.617] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e874 | out: ppvObject=0x19e874*=0x0) returned 0x80004002
	[0186.617] WbemLocator:IUnknown:AddRef (This=0x57a2cd8) returned 0x3
	[0186.617] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5dc | out: ppvObject=0x19e5dc*=0x0) returned 0x80004002
	[0186.617] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e58c | out: ppvObject=0x19e58c*=0x0) returned 0x80004002
	[0186.617] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e598 | out: ppvObject=0x19e598*=0x0) returned 0x80004002
	[0186.617] CoGetContextToken (in: pToken=0x19e5f8 | out: pToken=0x19e5f8) returned 0x0
	[0186.618] CoGetContextToken (in: pToken=0x19ea00 | out: pToken=0x19ea00) returned 0x0
	[0186.618] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea90 | out: ppvObject=0x19ea90*=0x0) returned 0x80004002
	[0186.618] WbemLocator:IUnknown:Release (This=0x57a2cd8) returned 0x2
	[0186.618] WbemLocator:IUnknown:Release (This=0x57a2cd8) returned 0x1
	[0186.618] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0186.618] CoGetContextToken (in: pToken=0x19efd0 | out: pToken=0x19efd0) returned 0x0
	[0186.618] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x19f0a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x57a2cd8) returned 0x0
	[0186.618] WbemLocator:IUnknown:AddRef (This=0x57a2cd8) returned 0x3
	[0186.618] WbemLocator:IUnknown:Release (This=0x57a2cd8) returned 0x2
	[0186.618] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703bc0, puCount=0x19f238 | out: puCount=0x19f238*=0x2) returned 0x0
	[0186.618] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=8, puBuffLength=0x19f234*=0x0, pszText=0x0 | out: puBuffLength=0x19f234*=0x19, pszText=0x0) returned 0x0
	[0186.618] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=8, puBuffLength=0x19f234*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f234*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.618] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0fc | out: ppv=0x19f0fc*=0x57a2da8) returned 0x0
	[0186.618] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2da8, strNetworkResource="\\\\.\\ROOT\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1a4 | out: ppNamespace=0x19f1a4*=0x7857f0) returned 0x0
	[0186.670] WbemLocator:IUnknown:QueryInterface (in: This=0x7857f0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f02c | out: ppvObject=0x19f02c*=0x57b14d4) returned 0x0
	[0186.670] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b14d4, pProxy=0x7857f0, pAuthnSvc=0x19f07c, pAuthzSvc=0x19f078, pServerPrincName=0x19f070, pAuthnLevel=0x19f074, pImpLevel=0x19f064, pAuthInfo=0x19f068, pCapabilites=0x19f06c | out: pAuthnSvc=0x19f07c*=0xa, pAuthzSvc=0x19f078*=0x0, pServerPrincName=0x19f070, pAuthnLevel=0x19f074*=0x6, pImpLevel=0x19f064*=0x2, pAuthInfo=0x19f068, pCapabilites=0x19f06c*=0x1) returned 0x0
	[0186.670] WbemLocator:IUnknown:Release (This=0x57b14d4) returned 0x1
	[0186.670] WbemLocator:IUnknown:QueryInterface (in: This=0x7857f0, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f020 | out: ppvObject=0x19f020*=0x57b14f8) returned 0x0
	[0186.670] WbemLocator:IUnknown:QueryInterface (in: This=0x7857f0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f01c | out: ppvObject=0x19f01c*=0x57b14d4) returned 0x0
	[0186.671] WbemLocator:IClientSecurity:SetBlanket (This=0x57b14d4, pProxy=0x7857f0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.671] WbemLocator:IUnknown:Release (This=0x57b14d4) returned 0x2
	[0186.671] WbemLocator:IUnknown:Release (This=0x57b14f8) returned 0x1
	[0186.671] CoTaskMemFree (pv=0x57b7ba0) 
	[0186.671] WbemLocator:IUnknown:Release (This=0x57a2da8) returned 0x0
	[0186.671] WbemLocator:IUnknown:QueryInterface (in: This=0x7857f0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x57b14f8) returned 0x0
	[0186.671] WbemLocator:IUnknown:QueryInterface (in: This=0x57b14f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebd8 | out: ppvObject=0x19ebd8*=0x0) returned 0x80004002
	[0186.672] WbemLocator:IUnknown:QueryInterface (in: This=0x57b14f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9f4 | out: ppvObject=0x19e9f4*=0x0) returned 0x80004002
	[0186.673] WbemLocator:IUnknown:QueryInterface (in: This=0x7857f0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7cc | out: ppvObject=0x19e7cc*=0x0) returned 0x80004002
	[0186.674] WbemLocator:IUnknown:AddRef (This=0x57b14f8) returned 0x3
	[0186.674] WbemLocator:IUnknown:QueryInterface (in: This=0x57b14f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0186.675] WbemLocator:IUnknown:QueryInterface (in: This=0x57b14f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4e4 | out: ppvObject=0x19e4e4*=0x0) returned 0x80004002
	[0186.675] WbemLocator:IUnknown:QueryInterface (in: This=0x57b14f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4f0 | out: ppvObject=0x19e4f0*=0x57b1454) returned 0x0
	[0186.675] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1454, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4f8 | out: pCid=0x19e4f8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.675] WbemLocator:IUnknown:Release (This=0x57b1454) returned 0x3
	[0186.675] CoGetContextToken (in: pToken=0x19e550 | out: pToken=0x19e550) returned 0x0
	[0186.675] CoGetContextToken (in: pToken=0x19e958 | out: pToken=0x19e958) returned 0x0
	[0186.675] WbemLocator:IUnknown:QueryInterface (in: This=0x57b14f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9e8 | out: ppvObject=0x19e9e8*=0x57b14dc) returned 0x0
	[0186.675] WbemLocator:IRpcOptions:Query (in: This=0x57b14dc, pPrx=0x57b14f8, dwProperty=2, pdwValue=0x19ea10 | out: pdwValue=0x19ea10) returned 0x80004002
	[0186.675] WbemLocator:IUnknown:Release (This=0x57b14dc) returned 0x3
	[0186.675] WbemLocator:IUnknown:Release (This=0x57b14f8) returned 0x2
	[0186.675] CoGetContextToken (in: pToken=0x19ef30 | out: pToken=0x19ef30) returned 0x0
	[0186.675] CoGetContextToken (in: pToken=0x19ee90 | out: pToken=0x19ee90) returned 0x0
	[0186.675] WbemLocator:IUnknown:QueryInterface (in: This=0x57b14f8, riid=0x19ef60*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef5c | out: ppvObject=0x19ef5c*=0x7857f0) returned 0x0
	[0186.675] WbemLocator:IUnknown:AddRef (This=0x7857f0) returned 0x4
	[0186.675] WbemLocator:IUnknown:Release (This=0x7857f0) returned 0x3
	[0186.675] WbemLocator:IUnknown:Release (This=0x7857f0) returned 0x2
	[0186.675] SysStringLen (param_1=0x0) returned 0x0
	[0186.676] CoGetContextToken (in: pToken=0x19ef38 | out: pToken=0x19ef38) returned 0x0
	[0186.676] WbemLocator:IUnknown:AddRef (This=0x57b14f8) returned 0x3
	[0186.676] WbemLocator:IUnknown:QueryInterface (in: This=0x57b14f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edcc | out: ppvObject=0x19edcc*=0x57b14f8) returned 0x0
	[0186.676] WbemLocator:IUnknown:Release (This=0x57b14f8) returned 0x3
	[0186.676] WbemLocator:IUnknown:Release (This=0x57b14f8) returned 0x2
	[0186.676] CoGetContextToken (in: pToken=0x19f030 | out: pToken=0x19f030) returned 0x0
	[0186.676] WbemLocator:IUnknown:AddRef (This=0x7857f0) returned 0x3
	[0186.676] IWbemServices:ExecQuery (in: This=0x7857f0, strQueryLanguage="WQL", strQuery="SELECT * FROM AntivirusProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f240 | out: ppEnum=0x19f240*=0x78a3f8) returned 0x0
	[0186.716] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x78a3fc) returned 0x0
	[0186.716] IClientSecurity:QueryBlanket (in: This=0x78a3fc, pProxy=0x78a3f8, pAuthnSvc=0x19f0f4, pAuthzSvc=0x19f0f0, pServerPrincName=0x19f0e8, pAuthnLevel=0x19f0ec, pImpLevel=0x19f0dc, pAuthInfo=0x19f0e0, pCapabilites=0x19f0e4 | out: pAuthnSvc=0x19f0f4*=0xa, pAuthzSvc=0x19f0f0*=0x0, pServerPrincName=0x19f0e8, pAuthnLevel=0x19f0ec*=0x6, pImpLevel=0x19f0dc*=0x2, pAuthInfo=0x19f0e0, pCapabilites=0x19f0e4*=0x1) returned 0x0
	[0186.716] IUnknown:Release (This=0x78a3fc) returned 0x1
	[0186.716] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f098 | out: ppvObject=0x19f098*=0x57b03f8) returned 0x0
	[0186.716] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f094 | out: ppvObject=0x19f094*=0x78a3fc) returned 0x0
	[0186.716] IClientSecurity:SetBlanket (This=0x78a3fc, pProxy=0x78a3f8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.718] IUnknown:Release (This=0x78a3fc) returned 0x2
	[0186.718] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x1
	[0186.718] CoTaskMemFree (pv=0x57b7ba0) 
	[0186.718] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec90 | out: ppvObject=0x19ec90*=0x57b03f8) returned 0x0
	[0186.718] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec4c | out: ppvObject=0x19ec4c*=0x0) returned 0x80004002
	[0186.718] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x0) returned 0x80004002
	[0186.719] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0186.719] WbemLocator:IUnknown:AddRef (This=0x57b03f8) returned 0x3
	[0186.719] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0186.719] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0186.719] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x57b0354) returned 0x0
	[0186.719] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0354, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e570 | out: pCid=0x19e570*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.719] WbemLocator:IUnknown:Release (This=0x57b0354) returned 0x3
	[0186.719] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0186.719] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0186.719] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x57b03dc) returned 0x0
	[0186.719] WbemLocator:IRpcOptions:Query (in: This=0x57b03dc, pPrx=0x57b03f8, dwProperty=2, pdwValue=0x19ea88 | out: pdwValue=0x19ea88) returned 0x80004002
	[0186.719] WbemLocator:IUnknown:Release (This=0x57b03dc) returned 0x3
	[0186.720] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x2
	[0186.720] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0186.720] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0186.720] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x19efd0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efcc | out: ppvObject=0x19efcc*=0x78a3f8) returned 0x0
	[0186.720] IUnknown:AddRef (This=0x78a3f8) returned 0x4
	[0186.720] IUnknown:Release (This=0x78a3f8) returned 0x3
	[0186.720] IUnknown:Release (This=0x78a3f8) returned 0x2
	[0186.720] WbemLocator:IUnknown:Release (This=0x7857f0) returned 0x2
	[0186.720] SysStringLen (param_1=0x0) returned 0x0
	[0186.720] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703bc0, puCount=0x19f28c | out: puCount=0x19f28c*=0x2) returned 0x0
	[0186.720] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f288*=0x0, pszText=0x0 | out: puBuffLength=0x19f288*=0x19, pszText=0x0) returned 0x0
	[0186.720] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f288*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f288*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.720] CoGetContextToken (in: pToken=0x19f0d8 | out: pToken=0x19f0d8) returned 0x0
	[0186.720] IUnknown:AddRef (This=0x78a3f8) returned 0x3
	[0186.720] IEnumWbemClassObject:Clone (in: This=0x78a3f8, ppEnum=0x19f298 | out: ppEnum=0x19f298*=0x78aa38) returned 0x0
	[0186.721] IUnknown:QueryInterface (in: This=0x78aa38, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x78aa3c) returned 0x0
	[0186.721] IClientSecurity:QueryBlanket (in: This=0x78aa3c, pProxy=0x78aa38, pAuthnSvc=0x19f1ac, pAuthzSvc=0x19f1a8, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4, pImpLevel=0x19f194, pAuthInfo=0x19f198, pCapabilites=0x19f19c | out: pAuthnSvc=0x19f1ac*=0xa, pAuthzSvc=0x19f1a8*=0x0, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4*=0x6, pImpLevel=0x19f194*=0x2, pAuthInfo=0x19f198, pCapabilites=0x19f19c*=0x1) returned 0x0
	[0186.721] IUnknown:Release (This=0x78aa3c) returned 0x1
	[0186.721] IUnknown:QueryInterface (in: This=0x78aa38, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f150 | out: ppvObject=0x19f150*=0x57b0bf8) returned 0x0
	[0186.721] IUnknown:QueryInterface (in: This=0x78aa38, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f14c | out: ppvObject=0x19f14c*=0x78aa3c) returned 0x0
	[0186.722] IClientSecurity:SetBlanket (This=0x78aa3c, pProxy=0x78aa38, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.723] IUnknown:Release (This=0x78aa3c) returned 0x2
	[0186.723] WbemLocator:IUnknown:Release (This=0x57b0bf8) returned 0x1
	[0186.723] CoTaskMemFree (pv=0x57b7ba0) 
	[0186.723] IUnknown:QueryInterface (in: This=0x78aa38, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed38 | out: ppvObject=0x19ed38*=0x57b0bf8) returned 0x0
	[0186.723] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecf4 | out: ppvObject=0x19ecf4*=0x0) returned 0x80004002
	[0186.723] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb14 | out: ppvObject=0x19eb14*=0x0) returned 0x80004002
	[0186.724] IUnknown:QueryInterface (in: This=0x78aa38, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8ec | out: ppvObject=0x19e8ec*=0x0) returned 0x80004002
	[0186.724] WbemLocator:IUnknown:AddRef (This=0x57b0bf8) returned 0x3
	[0186.724] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0186.724] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e604 | out: ppvObject=0x19e604*=0x0) returned 0x80004002
	[0186.724] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e610 | out: ppvObject=0x19e610*=0x57b0b54) returned 0x0
	[0186.724] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0b54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e618 | out: pCid=0x19e618*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.724] WbemLocator:IUnknown:Release (This=0x57b0b54) returned 0x3
	[0186.724] CoGetContextToken (in: pToken=0x19e670 | out: pToken=0x19e670) returned 0x0
	[0186.724] CoGetContextToken (in: pToken=0x19ea78 | out: pToken=0x19ea78) returned 0x0
	[0186.725] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb08 | out: ppvObject=0x19eb08*=0x57b0bdc) returned 0x0
	[0186.725] WbemLocator:IRpcOptions:Query (in: This=0x57b0bdc, pPrx=0x57b0bf8, dwProperty=2, pdwValue=0x19eb30 | out: pdwValue=0x19eb30) returned 0x80004002
	[0186.725] WbemLocator:IUnknown:Release (This=0x57b0bdc) returned 0x3
	[0186.725] WbemLocator:IUnknown:Release (This=0x57b0bf8) returned 0x2
	[0186.725] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0186.725] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0186.725] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x19f078*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x78aa38) returned 0x0
	[0186.725] IUnknown:AddRef (This=0x78aa38) returned 0x4
	[0186.725] IUnknown:Release (This=0x78aa38) returned 0x3
	[0186.725] IUnknown:Release (This=0x78aa38) returned 0x2
	[0186.725] IUnknown:Release (This=0x78a3f8) returned 0x2
	[0186.725] SysStringLen (param_1=0x0) returned 0x0
	[0186.725] IEnumWbemClassObject:Reset (This=0x78aa38) returned 0x0
	[0186.727] CoTaskMemAlloc (cb=0x4) returned 0x57a2e08
	[0186.727] IEnumWbemClassObject:Next (in: This=0x78aa38, lTimeout=-1, uCount=0x1, apObjects=0x57a2e08, puReturned=0x28a6ae0 | out: apObjects=0x57a2e08*=0x78ee50, puReturned=0x28a6ae0*=0x1) returned 0x0
	[0186.729] IUnknown:QueryInterface (in: This=0x78ee50, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e8f8 | out: ppvObject=0x19e8f8*=0x78ee50) returned 0x0
	[0186.729] IUnknown:QueryInterface (in: This=0x78ee50, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8b4 | out: ppvObject=0x19e8b4*=0x0) returned 0x80004002
	[0186.729] IUnknown:QueryInterface (in: This=0x78ee50, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e6d4 | out: ppvObject=0x19e6d4*=0x0) returned 0x80004002
	[0186.729] IUnknown:QueryInterface (in: This=0x78ee50, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4ac | out: ppvObject=0x19e4ac*=0x0) returned 0x80004002
	[0186.729] IUnknown:AddRef (This=0x78ee50) returned 0x3
	[0186.729] IUnknown:QueryInterface (in: This=0x78ee50, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e214 | out: ppvObject=0x19e214*=0x0) returned 0x80004002
	[0186.729] IUnknown:QueryInterface (in: This=0x78ee50, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1c4 | out: ppvObject=0x19e1c4*=0x0) returned 0x80004002
	[0186.729] IUnknown:QueryInterface (in: This=0x78ee50, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e1d0 | out: ppvObject=0x19e1d0*=0x78ee54) returned 0x0
	[0186.729] IMarshal:GetUnmarshalClass (in: This=0x78ee54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e1d8 | out: pCid=0x19e1d8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0186.729] IUnknown:Release (This=0x78ee54) returned 0x3
	[0186.729] CoGetContextToken (in: pToken=0x19e230 | out: pToken=0x19e230) returned 0x0
	[0186.729] CoGetContextToken (in: pToken=0x19e638 | out: pToken=0x19e638) returned 0x0
	[0186.729] IUnknown:QueryInterface (in: This=0x78ee50, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6c8 | out: ppvObject=0x19e6c8*=0x0) returned 0x80004002
	[0186.729] IUnknown:Release (This=0x78ee50) returned 0x2
	[0186.729] CoGetContextToken (in: pToken=0x19ec08 | out: pToken=0x19ec08) returned 0x0
	[0186.730] CoGetContextToken (in: pToken=0x19eb68 | out: pToken=0x19eb68) returned 0x0
	[0186.730] IUnknown:QueryInterface (in: This=0x78ee50, riid=0x19ec38*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec34 | out: ppvObject=0x19ec34*=0x78ee50) returned 0x0
	[0186.730] IUnknown:AddRef (This=0x78ee50) returned 0x4
	[0186.730] IUnknown:Release (This=0x78ee50) returned 0x3
	[0186.730] IUnknown:Release (This=0x78ee50) returned 0x2
	[0186.730] CoTaskMemFree (pv=0x57a2e08) 
	[0186.730] CoGetContextToken (in: pToken=0x19ef78 | out: pToken=0x19ef78) returned 0x0
	[0186.730] IUnknown:AddRef (This=0x78ee50) returned 0x3
	[0186.730] IWbemClassObject:Get (in: This=0x78ee50, wszName="__GENUS", lFlags=0, pVal=0x19f288*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f308*=0, plFlavor=0x19f304*=0 | out: pVal=0x19f288*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f308*=3, plFlavor=0x19f304*=64) returned 0x0
	[0186.730] IWbemClassObject:Get (in: This=0x78ee50, wszName="__PATH", lFlags=0, pVal=0x19f26c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2f0*=0, plFlavor=0x19f2ec*=0 | out: pVal=0x19f26c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"", varVal2=0x0), pType=0x19f2f0*=8, plFlavor=0x19f2ec*=64) returned 0x0
	[0186.730] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xc8
	[0186.730] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xc8
	[0186.730] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f298 | out: ppv=0x19f298*=0x6d0ae4) returned 0x0
	[0186.730] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f290 | out: pAptType=0x19f290*=1) returned 0x0
	[0186.730] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f294 | out: ppvObject=0x19f294*=0x0) returned 0x80004002
	[0186.730] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.731] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec00 | out: ppv=0x19ec00*=0x57a2e08) returned 0x0
	[0186.731] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e08, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee18 | out: ppvObject=0x19ee18*=0x0) returned 0x80004002
	[0186.731] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e08, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee2c | out: ppvObject=0x19ee2c*=0x703840) returned 0x0
	[0186.731] WbemDefPath:IUnknown:Release (This=0x57a2e08) returned 0x0
	[0186.731] WbemDefPath:IUnknown:QueryInterface (in: This=0x703840, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea4c | out: ppvObject=0x19ea4c*=0x703840) returned 0x0
	[0186.731] WbemDefPath:IUnknown:QueryInterface (in: This=0x703840, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea08 | out: ppvObject=0x19ea08*=0x0) returned 0x80004002
	[0186.732] WbemDefPath:IUnknown:QueryInterface (in: This=0x703840, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5fc | out: ppvObject=0x19e5fc*=0x0) returned 0x80004002
	[0186.732] WbemDefPath:IUnknown:AddRef (This=0x703840) returned 0x3
	[0186.732] WbemDefPath:IUnknown:QueryInterface (in: This=0x703840, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e364 | out: ppvObject=0x19e364*=0x0) returned 0x80004002
	[0186.732] WbemDefPath:IUnknown:QueryInterface (in: This=0x703840, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e314 | out: ppvObject=0x19e314*=0x0) returned 0x80004002
	[0186.732] WbemDefPath:IUnknown:QueryInterface (in: This=0x703840, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e320 | out: ppvObject=0x19e320*=0x57c0e18) returned 0x0
	[0186.732] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c0e18, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e328 | out: pCid=0x19e328*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.732] WbemDefPath:IUnknown:Release (This=0x57c0e18) returned 0x3
	[0186.732] CoGetContextToken (in: pToken=0x19e380 | out: pToken=0x19e380) returned 0x0
	[0186.732] CoGetContextToken (in: pToken=0x19e788 | out: pToken=0x19e788) returned 0x0
	[0186.732] WbemDefPath:IUnknown:QueryInterface (in: This=0x703840, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e818 | out: ppvObject=0x19e818*=0x0) returned 0x80004002
	[0186.732] WbemDefPath:IUnknown:Release (This=0x703840) returned 0x2
	[0186.732] WbemDefPath:IUnknown:Release (This=0x703840) returned 0x1
	[0186.732] CoGetContextToken (in: pToken=0x19f110 | out: pToken=0x19f110) returned 0x0
	[0186.732] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0186.732] WbemDefPath:IUnknown:QueryInterface (in: This=0x703840, riid=0x19f140*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f13c | out: ppvObject=0x19f13c*=0x703840) returned 0x0
	[0186.732] WbemDefPath:IUnknown:AddRef (This=0x703840) returned 0x3
	[0186.732] WbemDefPath:IUnknown:Release (This=0x703840) returned 0x2
	[0186.732] WbemDefPath:IWbemPath:SetText (This=0x703840, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0x0
	[0186.732] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703bc0, puCount=0x19f2c4 | out: puCount=0x19f2c4*=0x2) returned 0x0
	[0186.733] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f2c0*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c0*=0x19, pszText=0x0) returned 0x0
	[0186.733] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f2c0*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2c0*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.733] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703bc0, puCount=0x19f290 | out: puCount=0x19f290*=0x2) returned 0x0
	[0186.733] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f28c*=0x0, pszText=0x0 | out: puBuffLength=0x19f28c*=0x19, pszText=0x0) returned 0x0
	[0186.733] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f28c*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f28c*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.733] IWbemClassObject:Get (in: This=0x78ee50, wszName="displayName", lFlags=0, pVal=0x19f28c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a73c0*=0, plFlavor=0x28a73c4*=0 | out: pVal=0x19f28c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x28a73c0*=8, plFlavor=0x28a73c4*=0) returned 0x0
	[0186.733] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.733] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.733] IWbemClassObject:Get (in: This=0x78ee50, wszName="displayName", lFlags=0, pVal=0x19f294*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a73c0*=8, plFlavor=0x28a73c4*=0 | out: pVal=0x19f294*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x28a73c0*=8, plFlavor=0x28a73c4*=0) returned 0x0
	[0186.733] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.733] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.733] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703bc0, puCount=0x19f290 | out: puCount=0x19f290*=0x2) returned 0x0
	[0186.733] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f28c*=0x0, pszText=0x0 | out: puBuffLength=0x19f28c*=0x19, pszText=0x0) returned 0x0
	[0186.733] WbemDefPath:IWbemPath:GetText (in: This=0x703bc0, lFlags=4, puBuffLength=0x19f28c*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f28c*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.733] IWbemClassObject:Get (in: This=0x78ee50, wszName="displayName", lFlags=0, pVal=0x19f28c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a74d0*=0, plFlavor=0x28a74d4*=0 | out: pVal=0x19f28c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x28a74d0*=8, plFlavor=0x28a74d4*=0) returned 0x0
	[0186.734] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.734] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.734] IWbemClassObject:Get (in: This=0x78ee50, wszName="displayName", lFlags=0, pVal=0x19f294*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a74d0*=8, plFlavor=0x28a74d4*=0 | out: pVal=0x19f294*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x28a74d0*=8, plFlavor=0x28a74d4*=0) returned 0x0
	[0186.734] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.734] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.734] CoTaskMemAlloc (cb=0x4) returned 0x57a2e08
	[0186.734] IEnumWbemClassObject:Next (in: This=0x78aa38, lTimeout=-1, uCount=0x1, apObjects=0x57a2e08, puReturned=0x28a6ae0 | out: apObjects=0x57a2e08*=0x0, puReturned=0x28a6ae0*=0x0) returned 0x1
	[0186.734] CoTaskMemFree (pv=0x57a2e08) 
	[0186.735] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0186.735] WbemLocator:IUnknown:Release (This=0x57b0bf8) returned 0x1
	[0186.735] IUnknown:Release (This=0x78aa38) returned 0x0
	[0186.736] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0186.736] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x1
	[0186.736] IUnknown:Release (This=0x78a3f8) returned 0x0
	[0186.736] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2b4 | out: ppv=0x19f2b4*=0x6d0ae4) returned 0x0
	[0186.737] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2ac | out: pAptType=0x19f2ac*=1) returned 0x0
	[0186.737] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x0) returned 0x80004002
	[0186.737] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.737] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec20 | out: ppv=0x19ec20*=0x57a2e58) returned 0x0
	[0186.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee38 | out: ppvObject=0x19ee38*=0x0) returned 0x80004002
	[0186.738] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee4c | out: ppvObject=0x19ee4c*=0x7038b0) returned 0x0
	[0186.738] WbemDefPath:IUnknown:Release (This=0x57a2e58) returned 0x0
	[0186.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x7038b0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x7038b0) returned 0x0
	[0186.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x7038b0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x0) returned 0x80004002
	[0186.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x7038b0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e61c | out: ppvObject=0x19e61c*=0x0) returned 0x80004002
	[0186.738] WbemDefPath:IUnknown:AddRef (This=0x7038b0) returned 0x3
	[0186.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x7038b0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e384 | out: ppvObject=0x19e384*=0x0) returned 0x80004002
	[0186.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x7038b0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e334 | out: ppvObject=0x19e334*=0x0) returned 0x80004002
	[0186.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x7038b0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e340 | out: ppvObject=0x19e340*=0x57c0f68) returned 0x0
	[0186.738] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c0f68, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e348 | out: pCid=0x19e348*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.738] WbemDefPath:IUnknown:Release (This=0x57c0f68) returned 0x3
	[0186.738] CoGetContextToken (in: pToken=0x19e3a0 | out: pToken=0x19e3a0) returned 0x0
	[0186.738] CoGetContextToken (in: pToken=0x19e7a8 | out: pToken=0x19e7a8) returned 0x0
	[0186.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x7038b0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e838 | out: ppvObject=0x19e838*=0x0) returned 0x80004002
	[0186.738] WbemDefPath:IUnknown:Release (This=0x7038b0) returned 0x2
	[0186.738] WbemDefPath:IUnknown:Release (This=0x7038b0) returned 0x1
	[0186.738] CoGetContextToken (in: pToken=0x19f130 | out: pToken=0x19f130) returned 0x0
	[0186.738] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0186.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x7038b0, riid=0x19f160*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x7038b0) returned 0x0
	[0186.739] WbemDefPath:IUnknown:AddRef (This=0x7038b0) returned 0x3
	[0186.739] WbemDefPath:IUnknown:Release (This=0x7038b0) returned 0x2
	[0186.739] WbemDefPath:IWbemPath:SetText (This=0x7038b0, uMode=0x4, pszPath="ROOT\\SecurityCenter") returned 0x0
	[0186.739] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7038b0, puCount=0x19f2dc | out: puCount=0x19f2dc*=0x2) returned 0x0
	[0186.739] WbemDefPath:IWbemPath:GetText (in: This=0x7038b0, lFlags=4, puBuffLength=0x19f2d8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2d8*=0x18, pszText=0x0) returned 0x0
	[0186.739] WbemDefPath:IWbemPath:GetText (in: This=0x7038b0, lFlags=4, puBuffLength=0x19f2d8*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f2d8*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0186.739] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7038b0, puCount=0x19f2c8 | out: puCount=0x19f2c8*=0x2) returned 0x0
	[0186.739] WbemDefPath:IWbemPath:GetText (in: This=0x7038b0, lFlags=4, puBuffLength=0x19f2c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c4*=0x18, pszText=0x0) returned 0x0
	[0186.739] WbemDefPath:IWbemPath:GetText (in: This=0x7038b0, lFlags=4, puBuffLength=0x19f2c4*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f2c4*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0186.739] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f25c | out: ppv=0x19f25c*=0x6d0ae4) returned 0x0
	[0186.739] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f254 | out: pAptType=0x19f254*=1) returned 0x0
	[0186.739] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f258 | out: ppvObject=0x19f258*=0x0) returned 0x80004002
	[0186.739] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.739] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee78 | out: ppv=0x19ee78*=0x57c0d28) returned 0x0
	[0186.740] WbemLocator:IUnknown:QueryInterface (in: This=0x57c0d28, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f090 | out: ppvObject=0x19f090*=0x0) returned 0x80004002
	[0186.740] WbemLocator:IClassFactory:CreateInstance (in: This=0x57c0d28, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x57a2e68) returned 0x0
	[0186.740] WbemLocator:IUnknown:Release (This=0x57c0d28) returned 0x0
	[0186.740] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x57a2e68) returned 0x0
	[0186.740] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec80 | out: ppvObject=0x19ec80*=0x0) returned 0x80004002
	[0186.740] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e874 | out: ppvObject=0x19e874*=0x0) returned 0x80004002
	[0186.740] WbemLocator:IUnknown:AddRef (This=0x57a2e68) returned 0x3
	[0186.740] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5dc | out: ppvObject=0x19e5dc*=0x0) returned 0x80004002
	[0186.740] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e58c | out: ppvObject=0x19e58c*=0x0) returned 0x80004002
	[0186.740] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e598 | out: ppvObject=0x19e598*=0x0) returned 0x80004002
	[0186.740] CoGetContextToken (in: pToken=0x19e5f8 | out: pToken=0x19e5f8) returned 0x0
	[0186.740] CoGetContextToken (in: pToken=0x19ea00 | out: pToken=0x19ea00) returned 0x0
	[0186.740] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea90 | out: ppvObject=0x19ea90*=0x0) returned 0x80004002
	[0186.740] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x2
	[0186.740] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x1
	[0186.740] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0186.740] CoGetContextToken (in: pToken=0x19efd0 | out: pToken=0x19efd0) returned 0x0
	[0186.740] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x19f0a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x57a2e68) returned 0x0
	[0186.741] WbemLocator:IUnknown:AddRef (This=0x57a2e68) returned 0x3
	[0186.741] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x2
	[0186.741] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7038b0, puCount=0x19f238 | out: puCount=0x19f238*=0x2) returned 0x0
	[0186.741] WbemDefPath:IWbemPath:GetText (in: This=0x7038b0, lFlags=8, puBuffLength=0x19f234*=0x0, pszText=0x0 | out: puBuffLength=0x19f234*=0x18, pszText=0x0) returned 0x0
	[0186.741] WbemDefPath:IWbemPath:GetText (in: This=0x7038b0, lFlags=8, puBuffLength=0x19f234*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f234*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0186.741] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0fc | out: ppv=0x19f0fc*=0x57a2e08) returned 0x0
	[0186.741] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2e08, strNetworkResource="\\\\.\\ROOT\\SecurityCenter", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1a4 | out: ppNamespace=0x19f1a4*=0x785840) returned 0x0
	[0186.758] WbemLocator:IUnknown:QueryInterface (in: This=0x785840, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f02c | out: ppvObject=0x19f02c*=0x57b1dd4) returned 0x0
	[0186.759] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b1dd4, pProxy=0x785840, pAuthnSvc=0x19f07c, pAuthzSvc=0x19f078, pServerPrincName=0x19f070, pAuthnLevel=0x19f074, pImpLevel=0x19f064, pAuthInfo=0x19f068, pCapabilites=0x19f06c | out: pAuthnSvc=0x19f07c*=0xa, pAuthzSvc=0x19f078*=0x0, pServerPrincName=0x19f070, pAuthnLevel=0x19f074*=0x6, pImpLevel=0x19f064*=0x2, pAuthInfo=0x19f068, pCapabilites=0x19f06c*=0x1) returned 0x0
	[0186.759] WbemLocator:IUnknown:Release (This=0x57b1dd4) returned 0x1
	[0186.759] WbemLocator:IUnknown:QueryInterface (in: This=0x785840, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f020 | out: ppvObject=0x19f020*=0x57b1df8) returned 0x0
	[0186.759] WbemLocator:IUnknown:QueryInterface (in: This=0x785840, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f01c | out: ppvObject=0x19f01c*=0x57b1dd4) returned 0x0
	[0186.759] WbemLocator:IClientSecurity:SetBlanket (This=0x57b1dd4, pProxy=0x785840, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.759] WbemLocator:IUnknown:Release (This=0x57b1dd4) returned 0x2
	[0186.759] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x1
	[0186.759] CoTaskMemFree (pv=0x57b7e10) 
	[0186.759] WbemLocator:IUnknown:Release (This=0x57a2e08) returned 0x0
	[0186.759] WbemLocator:IUnknown:QueryInterface (in: This=0x785840, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x57b1df8) returned 0x0
	[0186.759] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebd8 | out: ppvObject=0x19ebd8*=0x0) returned 0x80004002
	[0186.760] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9f4 | out: ppvObject=0x19e9f4*=0x0) returned 0x80004002
	[0186.760] WbemLocator:IUnknown:QueryInterface (in: This=0x785840, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7cc | out: ppvObject=0x19e7cc*=0x0) returned 0x80004002
	[0186.761] WbemLocator:IUnknown:AddRef (This=0x57b1df8) returned 0x3
	[0186.761] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0186.761] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4e4 | out: ppvObject=0x19e4e4*=0x0) returned 0x80004002
	[0186.761] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4f0 | out: ppvObject=0x19e4f0*=0x57b1d54) returned 0x0
	[0186.761] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1d54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4f8 | out: pCid=0x19e4f8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.761] WbemLocator:IUnknown:Release (This=0x57b1d54) returned 0x3
	[0186.761] CoGetContextToken (in: pToken=0x19e550 | out: pToken=0x19e550) returned 0x0
	[0186.761] CoGetContextToken (in: pToken=0x19e958 | out: pToken=0x19e958) returned 0x0
	[0186.761] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9e8 | out: ppvObject=0x19e9e8*=0x57b1ddc) returned 0x0
	[0186.762] WbemLocator:IRpcOptions:Query (in: This=0x57b1ddc, pPrx=0x57b1df8, dwProperty=2, pdwValue=0x19ea10 | out: pdwValue=0x19ea10) returned 0x80004002
	[0186.762] WbemLocator:IUnknown:Release (This=0x57b1ddc) returned 0x3
	[0186.762] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x2
	[0186.762] CoGetContextToken (in: pToken=0x19ef30 | out: pToken=0x19ef30) returned 0x0
	[0186.762] CoGetContextToken (in: pToken=0x19ee90 | out: pToken=0x19ee90) returned 0x0
	[0186.762] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x19ef60*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef5c | out: ppvObject=0x19ef5c*=0x785840) returned 0x0
	[0186.762] WbemLocator:IUnknown:AddRef (This=0x785840) returned 0x4
	[0186.762] WbemLocator:IUnknown:Release (This=0x785840) returned 0x3
	[0186.762] WbemLocator:IUnknown:Release (This=0x785840) returned 0x2
	[0186.762] SysStringLen (param_1=0x0) returned 0x0
	[0186.762] CoGetContextToken (in: pToken=0x19ef38 | out: pToken=0x19ef38) returned 0x0
	[0186.762] WbemLocator:IUnknown:AddRef (This=0x57b1df8) returned 0x3
	[0186.762] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edcc | out: ppvObject=0x19edcc*=0x57b1df8) returned 0x0
	[0186.762] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x3
	[0186.762] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x2
	[0186.762] CoGetContextToken (in: pToken=0x19f030 | out: pToken=0x19f030) returned 0x0
	[0186.762] WbemLocator:IUnknown:AddRef (This=0x785840) returned 0x3
	[0186.762] IWbemServices:ExecQuery (in: This=0x785840, strQueryLanguage="WQL", strQuery="SELECT * FROM AntivirusProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f240 | out: ppEnum=0x19f240*=0x78b078) returned 0x0
	[0186.786] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x78b07c) returned 0x0
	[0186.787] IClientSecurity:QueryBlanket (in: This=0x78b07c, pProxy=0x78b078, pAuthnSvc=0x19f0f4, pAuthzSvc=0x19f0f0, pServerPrincName=0x19f0e8, pAuthnLevel=0x19f0ec, pImpLevel=0x19f0dc, pAuthInfo=0x19f0e0, pCapabilites=0x19f0e4 | out: pAuthnSvc=0x19f0f4*=0xa, pAuthzSvc=0x19f0f0*=0x0, pServerPrincName=0x19f0e8, pAuthnLevel=0x19f0ec*=0x6, pImpLevel=0x19f0dc*=0x2, pAuthInfo=0x19f0e0, pCapabilites=0x19f0e4*=0x1) returned 0x0
	[0186.787] IUnknown:Release (This=0x78b07c) returned 0x1
	[0186.787] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f098 | out: ppvObject=0x19f098*=0x57b08f8) returned 0x0
	[0186.787] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f094 | out: ppvObject=0x19f094*=0x78b07c) returned 0x0
	[0186.787] IClientSecurity:SetBlanket (This=0x78b07c, pProxy=0x78b078, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.801] IUnknown:Release (This=0x78b07c) returned 0x2
	[0186.801] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x1
	[0186.801] CoTaskMemFree (pv=0x57b7c30) 
	[0186.801] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec90 | out: ppvObject=0x19ec90*=0x57b08f8) returned 0x0
	[0186.801] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec4c | out: ppvObject=0x19ec4c*=0x0) returned 0x80004002
	[0186.802] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x0) returned 0x80004002
	[0186.802] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0186.803] WbemLocator:IUnknown:AddRef (This=0x57b08f8) returned 0x3
	[0186.803] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0186.803] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0186.803] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x57b0854) returned 0x0
	[0186.803] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0854, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e570 | out: pCid=0x19e570*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.803] WbemLocator:IUnknown:Release (This=0x57b0854) returned 0x3
	[0186.803] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0186.803] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0186.803] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x57b08dc) returned 0x0
	[0186.803] WbemLocator:IRpcOptions:Query (in: This=0x57b08dc, pPrx=0x57b08f8, dwProperty=2, pdwValue=0x19ea88 | out: pdwValue=0x19ea88) returned 0x80004002
	[0186.803] WbemLocator:IUnknown:Release (This=0x57b08dc) returned 0x3
	[0186.803] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x2
	[0186.803] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0186.803] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0186.803] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x19efd0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efcc | out: ppvObject=0x19efcc*=0x78b078) returned 0x0
	[0186.803] IUnknown:AddRef (This=0x78b078) returned 0x4
	[0186.803] IUnknown:Release (This=0x78b078) returned 0x3
	[0186.804] IUnknown:Release (This=0x78b078) returned 0x2
	[0186.804] WbemLocator:IUnknown:Release (This=0x785840) returned 0x2
	[0186.804] SysStringLen (param_1=0x0) returned 0x0
	[0186.804] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7038b0, puCount=0x19f28c | out: puCount=0x19f28c*=0x2) returned 0x0
	[0186.804] WbemDefPath:IWbemPath:GetText (in: This=0x7038b0, lFlags=4, puBuffLength=0x19f288*=0x0, pszText=0x0 | out: puBuffLength=0x19f288*=0x18, pszText=0x0) returned 0x0
	[0186.804] WbemDefPath:IWbemPath:GetText (in: This=0x7038b0, lFlags=4, puBuffLength=0x19f288*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f288*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0186.804] CoGetContextToken (in: pToken=0x19f0d8 | out: pToken=0x19f0d8) returned 0x0
	[0186.804] IUnknown:AddRef (This=0x78b078) returned 0x3
	[0186.804] IEnumWbemClassObject:Clone (in: This=0x78b078, ppEnum=0x19f298 | out: ppEnum=0x19f298*=0x78afb0) returned 0x0
	[0186.805] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x78afb4) returned 0x0
	[0186.805] IClientSecurity:QueryBlanket (in: This=0x78afb4, pProxy=0x78afb0, pAuthnSvc=0x19f1ac, pAuthzSvc=0x19f1a8, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4, pImpLevel=0x19f194, pAuthInfo=0x19f198, pCapabilites=0x19f19c | out: pAuthnSvc=0x19f1ac*=0xa, pAuthzSvc=0x19f1a8*=0x0, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4*=0x6, pImpLevel=0x19f194*=0x2, pAuthInfo=0x19f198, pCapabilites=0x19f19c*=0x1) returned 0x0
	[0186.805] IUnknown:Release (This=0x78afb4) returned 0x1
	[0186.805] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f150 | out: ppvObject=0x19f150*=0x57b03f8) returned 0x0
	[0186.805] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f14c | out: ppvObject=0x19f14c*=0x78afb4) returned 0x0
	[0186.805] IClientSecurity:SetBlanket (This=0x78afb4, pProxy=0x78afb0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.808] IUnknown:Release (This=0x78afb4) returned 0x2
	[0186.808] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x1
	[0186.808] CoTaskMemFree (pv=0x57b7ba0) 
	[0186.808] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed38 | out: ppvObject=0x19ed38*=0x57b03f8) returned 0x0
	[0186.808] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecf4 | out: ppvObject=0x19ecf4*=0x0) returned 0x80004002
	[0186.809] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb14 | out: ppvObject=0x19eb14*=0x0) returned 0x80004002
	[0186.809] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8ec | out: ppvObject=0x19e8ec*=0x0) returned 0x80004002
	[0186.810] WbemLocator:IUnknown:AddRef (This=0x57b03f8) returned 0x3
	[0186.810] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0186.810] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e604 | out: ppvObject=0x19e604*=0x0) returned 0x80004002
	[0186.810] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e610 | out: ppvObject=0x19e610*=0x57b0354) returned 0x0
	[0186.810] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0354, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e618 | out: pCid=0x19e618*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.810] WbemLocator:IUnknown:Release (This=0x57b0354) returned 0x3
	[0186.810] CoGetContextToken (in: pToken=0x19e670 | out: pToken=0x19e670) returned 0x0
	[0186.810] CoGetContextToken (in: pToken=0x19ea78 | out: pToken=0x19ea78) returned 0x0
	[0186.811] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb08 | out: ppvObject=0x19eb08*=0x57b03dc) returned 0x0
	[0186.811] WbemLocator:IRpcOptions:Query (in: This=0x57b03dc, pPrx=0x57b03f8, dwProperty=2, pdwValue=0x19eb30 | out: pdwValue=0x19eb30) returned 0x80004002
	[0186.811] WbemLocator:IUnknown:Release (This=0x57b03dc) returned 0x3
	[0186.811] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x2
	[0186.811] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0186.811] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0186.811] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x19f078*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x78afb0) returned 0x0
	[0186.811] IUnknown:AddRef (This=0x78afb0) returned 0x4
	[0186.811] IUnknown:Release (This=0x78afb0) returned 0x3
	[0186.811] IUnknown:Release (This=0x78afb0) returned 0x2
	[0186.811] IUnknown:Release (This=0x78b078) returned 0x2
	[0186.811] SysStringLen (param_1=0x0) returned 0x0
	[0186.811] IEnumWbemClassObject:Reset (This=0x78afb0) returned 0x0
	[0186.812] CoTaskMemAlloc (cb=0x4) returned 0x57a2e08
	[0186.812] IEnumWbemClassObject:Next (in: This=0x78afb0, lTimeout=-1, uCount=0x1, apObjects=0x57a2e08, puReturned=0x28a8590 | out: apObjects=0x57a2e08*=0x0, puReturned=0x28a8590*=0x0) returned 0x1
	[0186.813] CoTaskMemFree (pv=0x57a2e08) 
	[0186.813] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0186.813] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x1
	[0186.813] IUnknown:Release (This=0x78afb0) returned 0x0
	[0186.814] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0186.814] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x1
	[0186.814] IUnknown:Release (This=0x78b078) returned 0x0
	[0186.815] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2b4 | out: ppv=0x19f2b4*=0x6d0ae4) returned 0x0
	[0186.815] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2ac | out: pAptType=0x19f2ac*=1) returned 0x0
	[0186.815] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x0) returned 0x80004002
	[0186.815] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.816] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec20 | out: ppv=0x19ec20*=0x57a2d18) returned 0x0
	[0186.816] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d18, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee38 | out: ppvObject=0x19ee38*=0x0) returned 0x80004002
	[0186.816] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d18, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee4c | out: ppvObject=0x19ee4c*=0x57abfe8) returned 0x0
	[0186.816] WbemDefPath:IUnknown:Release (This=0x57a2d18) returned 0x0
	[0186.816] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abfe8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x57abfe8) returned 0x0
	[0186.816] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abfe8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x0) returned 0x80004002
	[0186.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abfe8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e61c | out: ppvObject=0x19e61c*=0x0) returned 0x80004002
	[0186.817] WbemDefPath:IUnknown:AddRef (This=0x57abfe8) returned 0x3
	[0186.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abfe8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e384 | out: ppvObject=0x19e384*=0x0) returned 0x80004002
	[0186.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abfe8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e334 | out: ppvObject=0x19e334*=0x0) returned 0x80004002
	[0186.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abfe8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e340 | out: ppvObject=0x19e340*=0x57c1190) returned 0x0
	[0186.817] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c1190, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e348 | out: pCid=0x19e348*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.817] WbemDefPath:IUnknown:Release (This=0x57c1190) returned 0x3
	[0186.817] CoGetContextToken (in: pToken=0x19e3a0 | out: pToken=0x19e3a0) returned 0x0
	[0186.817] CoGetContextToken (in: pToken=0x19e7a8 | out: pToken=0x19e7a8) returned 0x0
	[0186.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abfe8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e838 | out: ppvObject=0x19e838*=0x0) returned 0x80004002
	[0186.817] WbemDefPath:IUnknown:Release (This=0x57abfe8) returned 0x2
	[0186.817] WbemDefPath:IUnknown:Release (This=0x57abfe8) returned 0x1
	[0186.817] CoGetContextToken (in: pToken=0x19f130 | out: pToken=0x19f130) returned 0x0
	[0186.817] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0186.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abfe8, riid=0x19f160*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x57abfe8) returned 0x0
	[0186.818] WbemDefPath:IUnknown:AddRef (This=0x57abfe8) returned 0x3
	[0186.818] WbemDefPath:IUnknown:Release (This=0x57abfe8) returned 0x2
	[0186.818] WbemDefPath:IWbemPath:SetText (This=0x57abfe8, uMode=0x4, pszPath="ROOT\\SecurityCenter2") returned 0x0
	[0186.818] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abfe8, puCount=0x19f2dc | out: puCount=0x19f2dc*=0x2) returned 0x0
	[0186.818] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f2d8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2d8*=0x19, pszText=0x0) returned 0x0
	[0186.818] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f2d8*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2d8*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.818] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abfe8, puCount=0x19f2c8 | out: puCount=0x19f2c8*=0x2) returned 0x0
	[0186.818] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f2c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c4*=0x19, pszText=0x0) returned 0x0
	[0186.818] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f2c4*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2c4*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.818] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f25c | out: ppv=0x19f25c*=0x6d0ae4) returned 0x0
	[0186.818] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f254 | out: pAptType=0x19f254*=1) returned 0x0
	[0186.818] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f258 | out: ppvObject=0x19f258*=0x0) returned 0x80004002
	[0186.818] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.818] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee78 | out: ppv=0x19ee78*=0x57c10b8) returned 0x0
	[0186.819] WbemLocator:IUnknown:QueryInterface (in: This=0x57c10b8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f090 | out: ppvObject=0x19f090*=0x0) returned 0x80004002
	[0186.819] WbemLocator:IClassFactory:CreateInstance (in: This=0x57c10b8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x57a2e58) returned 0x0
	[0186.819] WbemLocator:IUnknown:Release (This=0x57c10b8) returned 0x0
	[0186.819] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e58, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x57a2e58) returned 0x0
	[0186.819] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e58, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec80 | out: ppvObject=0x19ec80*=0x0) returned 0x80004002
	[0186.819] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e58, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e874 | out: ppvObject=0x19e874*=0x0) returned 0x80004002
	[0186.819] WbemLocator:IUnknown:AddRef (This=0x57a2e58) returned 0x3
	[0186.819] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e58, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5dc | out: ppvObject=0x19e5dc*=0x0) returned 0x80004002
	[0186.819] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e58, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e58c | out: ppvObject=0x19e58c*=0x0) returned 0x80004002
	[0186.819] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e58, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e598 | out: ppvObject=0x19e598*=0x0) returned 0x80004002
	[0186.819] CoGetContextToken (in: pToken=0x19e5f8 | out: pToken=0x19e5f8) returned 0x0
	[0186.819] CoGetContextToken (in: pToken=0x19ea00 | out: pToken=0x19ea00) returned 0x0
	[0186.819] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e58, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea90 | out: ppvObject=0x19ea90*=0x0) returned 0x80004002
	[0186.819] WbemLocator:IUnknown:Release (This=0x57a2e58) returned 0x2
	[0186.819] WbemLocator:IUnknown:Release (This=0x57a2e58) returned 0x1
	[0186.819] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0186.819] CoGetContextToken (in: pToken=0x19efd0 | out: pToken=0x19efd0) returned 0x0
	[0186.819] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e58, riid=0x19f0a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x57a2e58) returned 0x0
	[0186.819] WbemLocator:IUnknown:AddRef (This=0x57a2e58) returned 0x3
	[0186.819] WbemLocator:IUnknown:Release (This=0x57a2e58) returned 0x2
	[0186.819] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abfe8, puCount=0x19f238 | out: puCount=0x19f238*=0x2) returned 0x0
	[0186.820] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=8, puBuffLength=0x19f234*=0x0, pszText=0x0 | out: puBuffLength=0x19f234*=0x19, pszText=0x0) returned 0x0
	[0186.820] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=8, puBuffLength=0x19f234*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f234*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.820] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0fc | out: ppv=0x19f0fc*=0x57a2da8) returned 0x0
	[0186.820] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2da8, strNetworkResource="\\\\.\\ROOT\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1a4 | out: ppNamespace=0x19f1a4*=0x785930) returned 0x0
	[0186.858] WbemLocator:IUnknown:QueryInterface (in: This=0x785930, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f02c | out: ppvObject=0x19f02c*=0x57b03d4) returned 0x0
	[0186.858] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b03d4, pProxy=0x785930, pAuthnSvc=0x19f07c, pAuthzSvc=0x19f078, pServerPrincName=0x19f070, pAuthnLevel=0x19f074, pImpLevel=0x19f064, pAuthInfo=0x19f068, pCapabilites=0x19f06c | out: pAuthnSvc=0x19f07c*=0xa, pAuthzSvc=0x19f078*=0x0, pServerPrincName=0x19f070, pAuthnLevel=0x19f074*=0x6, pImpLevel=0x19f064*=0x2, pAuthInfo=0x19f068, pCapabilites=0x19f06c*=0x1) returned 0x0
	[0186.858] WbemLocator:IUnknown:Release (This=0x57b03d4) returned 0x1
	[0186.858] WbemLocator:IUnknown:QueryInterface (in: This=0x785930, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f020 | out: ppvObject=0x19f020*=0x57b03f8) returned 0x0
	[0186.858] WbemLocator:IUnknown:QueryInterface (in: This=0x785930, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f01c | out: ppvObject=0x19f01c*=0x57b03d4) returned 0x0
	[0186.858] WbemLocator:IClientSecurity:SetBlanket (This=0x57b03d4, pProxy=0x785930, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.858] WbemLocator:IUnknown:Release (This=0x57b03d4) returned 0x2
	[0186.859] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x1
	[0186.859] CoTaskMemFree (pv=0x57b7de0) 
	[0186.859] WbemLocator:IUnknown:Release (This=0x57a2da8) returned 0x0
	[0186.859] WbemLocator:IUnknown:QueryInterface (in: This=0x785930, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x57b03f8) returned 0x0
	[0186.859] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebd8 | out: ppvObject=0x19ebd8*=0x0) returned 0x80004002
	[0186.863] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9f4 | out: ppvObject=0x19e9f4*=0x0) returned 0x80004002
	[0186.865] WbemLocator:IUnknown:QueryInterface (in: This=0x785930, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7cc | out: ppvObject=0x19e7cc*=0x0) returned 0x80004002
	[0186.866] WbemLocator:IUnknown:AddRef (This=0x57b03f8) returned 0x3
	[0186.866] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0186.866] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4e4 | out: ppvObject=0x19e4e4*=0x0) returned 0x80004002
	[0186.866] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4f0 | out: ppvObject=0x19e4f0*=0x57b0354) returned 0x0
	[0186.866] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0354, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4f8 | out: pCid=0x19e4f8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.866] WbemLocator:IUnknown:Release (This=0x57b0354) returned 0x3
	[0186.866] CoGetContextToken (in: pToken=0x19e550 | out: pToken=0x19e550) returned 0x0
	[0186.866] CoGetContextToken (in: pToken=0x19e958 | out: pToken=0x19e958) returned 0x0
	[0186.866] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9e8 | out: ppvObject=0x19e9e8*=0x57b03dc) returned 0x0
	[0186.866] WbemLocator:IRpcOptions:Query (in: This=0x57b03dc, pPrx=0x57b03f8, dwProperty=2, pdwValue=0x19ea10 | out: pdwValue=0x19ea10) returned 0x80004002
	[0186.867] WbemLocator:IUnknown:Release (This=0x57b03dc) returned 0x3
	[0186.867] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x2
	[0186.867] CoGetContextToken (in: pToken=0x19ef30 | out: pToken=0x19ef30) returned 0x0
	[0186.867] CoGetContextToken (in: pToken=0x19ee90 | out: pToken=0x19ee90) returned 0x0
	[0186.867] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x19ef60*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef5c | out: ppvObject=0x19ef5c*=0x785930) returned 0x0
	[0186.867] WbemLocator:IUnknown:AddRef (This=0x785930) returned 0x4
	[0186.867] WbemLocator:IUnknown:Release (This=0x785930) returned 0x3
	[0186.867] WbemLocator:IUnknown:Release (This=0x785930) returned 0x2
	[0186.867] SysStringLen (param_1=0x0) returned 0x0
	[0186.867] CoGetContextToken (in: pToken=0x19ef38 | out: pToken=0x19ef38) returned 0x0
	[0186.867] WbemLocator:IUnknown:AddRef (This=0x57b03f8) returned 0x3
	[0186.867] WbemLocator:IUnknown:QueryInterface (in: This=0x57b03f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edcc | out: ppvObject=0x19edcc*=0x57b03f8) returned 0x0
	[0186.867] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x3
	[0186.867] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x2
	[0186.867] CoGetContextToken (in: pToken=0x19f030 | out: pToken=0x19f030) returned 0x0
	[0186.867] WbemLocator:IUnknown:AddRef (This=0x785930) returned 0x3
	[0186.867] IWbemServices:ExecQuery (in: This=0x785930, strQueryLanguage="WQL", strQuery="SELECT * FROM AntiSpyWareProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f240 | out: ppEnum=0x19f240*=0x78a7e0) returned 0x0
	[0186.875] IUnknown:QueryInterface (in: This=0x78a7e0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a0 | out: ppvObject=0x19f0a0*=0x78a7e4) returned 0x0
	[0186.875] IClientSecurity:QueryBlanket (in: This=0x78a7e4, pProxy=0x78a7e0, pAuthnSvc=0x19f0f0, pAuthzSvc=0x19f0ec, pServerPrincName=0x19f0e4, pAuthnLevel=0x19f0e8, pImpLevel=0x19f0d8, pAuthInfo=0x19f0dc, pCapabilites=0x19f0e0 | out: pAuthnSvc=0x19f0f0*=0xa, pAuthzSvc=0x19f0ec*=0x0, pServerPrincName=0x19f0e4, pAuthnLevel=0x19f0e8*=0x6, pImpLevel=0x19f0d8*=0x2, pAuthInfo=0x19f0dc, pCapabilites=0x19f0e0*=0x1) returned 0x0
	[0186.876] IUnknown:Release (This=0x78a7e4) returned 0x1
	[0186.876] IUnknown:QueryInterface (in: This=0x78a7e0, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f094 | out: ppvObject=0x19f094*=0x57b05f8) returned 0x0
	[0186.876] IUnknown:QueryInterface (in: This=0x78a7e0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f090 | out: ppvObject=0x19f090*=0x78a7e4) returned 0x0
	[0186.876] IClientSecurity:SetBlanket (This=0x78a7e4, pProxy=0x78a7e0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.879] IUnknown:Release (This=0x78a7e4) returned 0x2
	[0186.880] WbemLocator:IUnknown:Release (This=0x57b05f8) returned 0x1
	[0186.880] CoTaskMemFree (pv=0x57b7c30) 
	[0186.880] IUnknown:QueryInterface (in: This=0x78a7e0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec8c | out: ppvObject=0x19ec8c*=0x57b05f8) returned 0x0
	[0186.880] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec48 | out: ppvObject=0x19ec48*=0x0) returned 0x80004002
	[0186.881] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea64 | out: ppvObject=0x19ea64*=0x0) returned 0x80004002
	[0186.882] IUnknown:QueryInterface (in: This=0x78a7e0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e83c | out: ppvObject=0x19e83c*=0x0) returned 0x80004002
	[0186.884] WbemLocator:IUnknown:AddRef (This=0x57b05f8) returned 0x3
	[0186.884] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5a4 | out: ppvObject=0x19e5a4*=0x0) returned 0x80004002
	[0186.884] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e554 | out: ppvObject=0x19e554*=0x0) returned 0x80004002
	[0186.884] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e560 | out: ppvObject=0x19e560*=0x57b0554) returned 0x0
	[0186.884] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0554, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e568 | out: pCid=0x19e568*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.884] WbemLocator:IUnknown:Release (This=0x57b0554) returned 0x3
	[0186.884] CoGetContextToken (in: pToken=0x19e5c0 | out: pToken=0x19e5c0) returned 0x0
	[0186.884] CoGetContextToken (in: pToken=0x19e9c8 | out: pToken=0x19e9c8) returned 0x0
	[0186.884] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea58 | out: ppvObject=0x19ea58*=0x57b05dc) returned 0x0
	[0186.884] WbemLocator:IRpcOptions:Query (in: This=0x57b05dc, pPrx=0x57b05f8, dwProperty=2, pdwValue=0x19ea80 | out: pdwValue=0x19ea80) returned 0x80004002
	[0186.884] WbemLocator:IUnknown:Release (This=0x57b05dc) returned 0x3
	[0186.884] WbemLocator:IUnknown:Release (This=0x57b05f8) returned 0x2
	[0186.885] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0186.885] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0186.885] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x19efd0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efcc | out: ppvObject=0x19efcc*=0x78a7e0) returned 0x0
	[0186.885] IUnknown:AddRef (This=0x78a7e0) returned 0x4
	[0186.885] IUnknown:Release (This=0x78a7e0) returned 0x3
	[0186.885] IUnknown:Release (This=0x78a7e0) returned 0x2
	[0186.885] WbemLocator:IUnknown:Release (This=0x785930) returned 0x2
	[0186.885] SysStringLen (param_1=0x0) returned 0x0
	[0186.885] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abfe8, puCount=0x19f28c | out: puCount=0x19f28c*=0x2) returned 0x0
	[0186.885] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f288*=0x0, pszText=0x0 | out: puBuffLength=0x19f288*=0x19, pszText=0x0) returned 0x0
	[0186.885] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f288*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f288*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.885] CoGetContextToken (in: pToken=0x19f0d8 | out: pToken=0x19f0d8) returned 0x0
	[0186.885] IUnknown:AddRef (This=0x78a7e0) returned 0x3
	[0186.885] IEnumWbemClassObject:Clone (in: This=0x78a7e0, ppEnum=0x19f298 | out: ppEnum=0x19f298*=0x78a330) returned 0x0
	[0186.886] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x78a334) returned 0x0
	[0186.886] IClientSecurity:QueryBlanket (in: This=0x78a334, pProxy=0x78a330, pAuthnSvc=0x19f1ac, pAuthzSvc=0x19f1a8, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4, pImpLevel=0x19f194, pAuthInfo=0x19f198, pCapabilites=0x19f19c | out: pAuthnSvc=0x19f1ac*=0xa, pAuthzSvc=0x19f1a8*=0x0, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4*=0x6, pImpLevel=0x19f194*=0x2, pAuthInfo=0x19f198, pCapabilites=0x19f19c*=0x1) returned 0x0
	[0186.886] IUnknown:Release (This=0x78a334) returned 0x1
	[0186.886] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f150 | out: ppvObject=0x19f150*=0x57b0bf8) returned 0x0
	[0186.886] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f14c | out: ppvObject=0x19f14c*=0x78a334) returned 0x0
	[0186.887] IClientSecurity:SetBlanket (This=0x78a334, pProxy=0x78a330, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.889] IUnknown:Release (This=0x78a334) returned 0x2
	[0186.889] WbemLocator:IUnknown:Release (This=0x57b0bf8) returned 0x1
	[0186.890] CoTaskMemFree (pv=0x57b7f00) 
	[0186.890] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed38 | out: ppvObject=0x19ed38*=0x57b0bf8) returned 0x0
	[0186.890] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecf4 | out: ppvObject=0x19ecf4*=0x0) returned 0x80004002
	[0186.891] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb14 | out: ppvObject=0x19eb14*=0x0) returned 0x80004002
	[0186.895] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8ec | out: ppvObject=0x19e8ec*=0x0) returned 0x80004002
	[0186.895] WbemLocator:IUnknown:AddRef (This=0x57b0bf8) returned 0x3
	[0186.895] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0186.895] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e604 | out: ppvObject=0x19e604*=0x0) returned 0x80004002
	[0186.895] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e610 | out: ppvObject=0x19e610*=0x57b0b54) returned 0x0
	[0186.895] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0b54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e618 | out: pCid=0x19e618*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.895] WbemLocator:IUnknown:Release (This=0x57b0b54) returned 0x3
	[0186.895] CoGetContextToken (in: pToken=0x19e670 | out: pToken=0x19e670) returned 0x0
	[0186.895] CoGetContextToken (in: pToken=0x19ea78 | out: pToken=0x19ea78) returned 0x0
	[0186.895] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb08 | out: ppvObject=0x19eb08*=0x57b0bdc) returned 0x0
	[0186.895] WbemLocator:IRpcOptions:Query (in: This=0x57b0bdc, pPrx=0x57b0bf8, dwProperty=2, pdwValue=0x19eb30 | out: pdwValue=0x19eb30) returned 0x80004002
	[0186.895] WbemLocator:IUnknown:Release (This=0x57b0bdc) returned 0x3
	[0186.896] WbemLocator:IUnknown:Release (This=0x57b0bf8) returned 0x2
	[0186.896] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0186.896] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0186.896] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x19f078*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x78a330) returned 0x0
	[0186.896] IUnknown:AddRef (This=0x78a330) returned 0x4
	[0186.896] IUnknown:Release (This=0x78a330) returned 0x3
	[0186.896] IUnknown:Release (This=0x78a330) returned 0x2
	[0186.896] IUnknown:Release (This=0x78a7e0) returned 0x2
	[0186.896] SysStringLen (param_1=0x0) returned 0x0
	[0186.896] IEnumWbemClassObject:Reset (This=0x78a330) returned 0x0
	[0186.896] CoTaskMemAlloc (cb=0x4) returned 0x57a2da8
	[0186.896] IEnumWbemClassObject:Next (in: This=0x78a330, lTimeout=-1, uCount=0x1, apObjects=0x57a2da8, puReturned=0x28a9604 | out: apObjects=0x57a2da8*=0x5825f20, puReturned=0x28a9604*=0x1) returned 0x0
	[0186.898] IUnknown:QueryInterface (in: This=0x5825f20, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e8f8 | out: ppvObject=0x19e8f8*=0x5825f20) returned 0x0
	[0186.898] IUnknown:QueryInterface (in: This=0x5825f20, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8b4 | out: ppvObject=0x19e8b4*=0x0) returned 0x80004002
	[0186.898] IUnknown:QueryInterface (in: This=0x5825f20, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e6d4 | out: ppvObject=0x19e6d4*=0x0) returned 0x80004002
	[0186.898] IUnknown:QueryInterface (in: This=0x5825f20, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4ac | out: ppvObject=0x19e4ac*=0x0) returned 0x80004002
	[0186.898] IUnknown:AddRef (This=0x5825f20) returned 0x3
	[0186.898] IUnknown:QueryInterface (in: This=0x5825f20, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e214 | out: ppvObject=0x19e214*=0x0) returned 0x80004002
	[0186.898] IUnknown:QueryInterface (in: This=0x5825f20, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1c4 | out: ppvObject=0x19e1c4*=0x0) returned 0x80004002
	[0186.899] IUnknown:QueryInterface (in: This=0x5825f20, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e1d0 | out: ppvObject=0x19e1d0*=0x5825f24) returned 0x0
	[0186.899] IMarshal:GetUnmarshalClass (in: This=0x5825f24, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e1d8 | out: pCid=0x19e1d8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0186.899] IUnknown:Release (This=0x5825f24) returned 0x3
	[0186.899] CoGetContextToken (in: pToken=0x19e230 | out: pToken=0x19e230) returned 0x0
	[0186.899] CoGetContextToken (in: pToken=0x19e638 | out: pToken=0x19e638) returned 0x0
	[0186.899] IUnknown:QueryInterface (in: This=0x5825f20, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6c8 | out: ppvObject=0x19e6c8*=0x0) returned 0x80004002
	[0186.899] IUnknown:Release (This=0x5825f20) returned 0x2
	[0186.899] CoGetContextToken (in: pToken=0x19ec08 | out: pToken=0x19ec08) returned 0x0
	[0186.899] CoGetContextToken (in: pToken=0x19eb68 | out: pToken=0x19eb68) returned 0x0
	[0186.899] IUnknown:QueryInterface (in: This=0x5825f20, riid=0x19ec38*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec34 | out: ppvObject=0x19ec34*=0x5825f20) returned 0x0
	[0186.899] IUnknown:AddRef (This=0x5825f20) returned 0x4
	[0186.899] IUnknown:Release (This=0x5825f20) returned 0x3
	[0186.899] IUnknown:Release (This=0x5825f20) returned 0x2
	[0186.899] CoTaskMemFree (pv=0x57a2da8) 
	[0186.899] CoGetContextToken (in: pToken=0x19ef78 | out: pToken=0x19ef78) returned 0x0
	[0186.899] IUnknown:AddRef (This=0x5825f20) returned 0x3
	[0186.899] IWbemClassObject:Get (in: This=0x5825f20, wszName="__GENUS", lFlags=0, pVal=0x19f288*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f308*=0, plFlavor=0x19f304*=0 | out: pVal=0x19f288*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f308*=3, plFlavor=0x19f304*=64) returned 0x0
	[0186.899] IWbemClassObject:Get (in: This=0x5825f20, wszName="__PATH", lFlags=0, pVal=0x19f26c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2f0*=0, plFlavor=0x19f2ec*=0 | out: pVal=0x19f26c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiSpywareProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"", varVal2=0x0), pType=0x19f2f0*=8, plFlavor=0x19f2ec*=64) returned 0x0
	[0186.900] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiSpywareProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xcc
	[0186.900] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiSpywareProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xcc
	[0186.900] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f298 | out: ppv=0x19f298*=0x6d0ae4) returned 0x0
	[0186.900] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f290 | out: pAptType=0x19f290*=1) returned 0x0
	[0186.900] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f294 | out: ppvObject=0x19f294*=0x0) returned 0x80004002
	[0186.900] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.901] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec00 | out: ppv=0x19ec00*=0x57a2eb8) returned 0x0
	[0186.901] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2eb8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee18 | out: ppvObject=0x19ee18*=0x0) returned 0x80004002
	[0186.921] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2eb8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee2c | out: ppvObject=0x19ee2c*=0x57ac3d8) returned 0x0
	[0186.921] WbemDefPath:IUnknown:Release (This=0x57a2eb8) returned 0x0
	[0186.921] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac3d8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea4c | out: ppvObject=0x19ea4c*=0x57ac3d8) returned 0x0
	[0186.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac3d8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea08 | out: ppvObject=0x19ea08*=0x0) returned 0x80004002
	[0186.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac3d8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5fc | out: ppvObject=0x19e5fc*=0x0) returned 0x80004002
	[0186.922] WbemDefPath:IUnknown:AddRef (This=0x57ac3d8) returned 0x3
	[0186.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac3d8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e364 | out: ppvObject=0x19e364*=0x0) returned 0x80004002
	[0186.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac3d8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e314 | out: ppvObject=0x19e314*=0x0) returned 0x80004002
	[0186.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac3d8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e320 | out: ppvObject=0x19e320*=0x57c12c8) returned 0x0
	[0186.922] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c12c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e328 | out: pCid=0x19e328*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.922] WbemDefPath:IUnknown:Release (This=0x57c12c8) returned 0x3
	[0186.922] CoGetContextToken (in: pToken=0x19e380 | out: pToken=0x19e380) returned 0x0
	[0186.922] CoGetContextToken (in: pToken=0x19e788 | out: pToken=0x19e788) returned 0x0
	[0186.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac3d8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e818 | out: ppvObject=0x19e818*=0x0) returned 0x80004002
	[0186.922] WbemDefPath:IUnknown:Release (This=0x57ac3d8) returned 0x2
	[0186.922] WbemDefPath:IUnknown:Release (This=0x57ac3d8) returned 0x1
	[0186.922] CoGetContextToken (in: pToken=0x19f110 | out: pToken=0x19f110) returned 0x0
	[0186.923] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0186.923] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac3d8, riid=0x19f140*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f13c | out: ppvObject=0x19f13c*=0x57ac3d8) returned 0x0
	[0186.923] WbemDefPath:IUnknown:AddRef (This=0x57ac3d8) returned 0x3
	[0186.923] WbemDefPath:IUnknown:Release (This=0x57ac3d8) returned 0x2
	[0186.923] WbemDefPath:IWbemPath:SetText (This=0x57ac3d8, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiSpywareProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0x0
	[0186.923] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abfe8, puCount=0x19f2c4 | out: puCount=0x19f2c4*=0x2) returned 0x0
	[0186.923] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f2c0*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c0*=0x19, pszText=0x0) returned 0x0
	[0186.923] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f2c0*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2c0*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.923] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abfe8, puCount=0x19f290 | out: puCount=0x19f290*=0x2) returned 0x0
	[0186.923] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f28c*=0x0, pszText=0x0 | out: puBuffLength=0x19f28c*=0x19, pszText=0x0) returned 0x0
	[0186.923] WbemDefPath:IWbemPath:GetText (in: This=0x57abfe8, lFlags=4, puBuffLength=0x19f28c*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f28c*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0186.923] IWbemClassObject:Get (in: This=0x5825f20, wszName="displayName", lFlags=0, pVal=0x19f28c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a9ee8*=0, plFlavor=0x28a9eec*=0 | out: pVal=0x19f28c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x28a9ee8*=8, plFlavor=0x28a9eec*=0) returned 0x0
	[0186.924] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.924] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.924] IWbemClassObject:Get (in: This=0x5825f20, wszName="displayName", lFlags=0, pVal=0x19f294*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a9ee8*=8, plFlavor=0x28a9eec*=0 | out: pVal=0x19f294*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x28a9ee8*=8, plFlavor=0x28a9eec*=0) returned 0x0
	[0186.924] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.924] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0186.924] CoTaskMemAlloc (cb=0x4) returned 0x57a2eb8
	[0186.924] IEnumWbemClassObject:Next (in: This=0x78a330, lTimeout=-1, uCount=0x1, apObjects=0x57a2eb8, puReturned=0x28a9604 | out: apObjects=0x57a2eb8*=0x0, puReturned=0x28a9604*=0x0) returned 0x1
	[0186.928] CoTaskMemFree (pv=0x57a2eb8) 
	[0186.928] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0186.928] WbemLocator:IUnknown:Release (This=0x57b0bf8) returned 0x1
	[0186.928] IUnknown:Release (This=0x78a330) returned 0x0
	[0186.930] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0186.930] WbemLocator:IUnknown:Release (This=0x57b05f8) returned 0x1
	[0186.930] IUnknown:Release (This=0x78a7e0) returned 0x0
	[0186.933] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2b4 | out: ppv=0x19f2b4*=0x6d0ae4) returned 0x0
	[0186.933] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2ac | out: pAptType=0x19f2ac*=1) returned 0x0
	[0186.933] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x0) returned 0x80004002
	[0186.933] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.934] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec20 | out: ppv=0x19ec20*=0x57a2dd8) returned 0x0
	[0186.934] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee38 | out: ppvObject=0x19ee38*=0x0) returned 0x80004002
	[0186.934] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee4c | out: ppvObject=0x19ee4c*=0x57abf78) returned 0x0
	[0186.935] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0186.935] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x57abf78) returned 0x0
	[0186.935] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x0) returned 0x80004002
	[0186.935] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e61c | out: ppvObject=0x19e61c*=0x0) returned 0x80004002
	[0186.935] WbemDefPath:IUnknown:AddRef (This=0x57abf78) returned 0x3
	[0186.935] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e384 | out: ppvObject=0x19e384*=0x0) returned 0x80004002
	[0186.935] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e334 | out: ppvObject=0x19e334*=0x0) returned 0x80004002
	[0186.935] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e340 | out: ppvObject=0x19e340*=0x57c10e8) returned 0x0
	[0186.935] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c10e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e348 | out: pCid=0x19e348*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.935] WbemDefPath:IUnknown:Release (This=0x57c10e8) returned 0x3
	[0186.935] CoGetContextToken (in: pToken=0x19e3a0 | out: pToken=0x19e3a0) returned 0x0
	[0186.936] CoGetContextToken (in: pToken=0x19e7a8 | out: pToken=0x19e7a8) returned 0x0
	[0186.936] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e838 | out: ppvObject=0x19e838*=0x0) returned 0x80004002
	[0186.936] WbemDefPath:IUnknown:Release (This=0x57abf78) returned 0x2
	[0186.936] WbemDefPath:IUnknown:Release (This=0x57abf78) returned 0x1
	[0186.936] CoGetContextToken (in: pToken=0x19f130 | out: pToken=0x19f130) returned 0x0
	[0186.936] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0186.936] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x19f160*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x57abf78) returned 0x0
	[0186.936] WbemDefPath:IUnknown:AddRef (This=0x57abf78) returned 0x3
	[0186.936] WbemDefPath:IUnknown:Release (This=0x57abf78) returned 0x2
	[0186.936] WbemDefPath:IWbemPath:SetText (This=0x57abf78, uMode=0x4, pszPath="ROOT\\SecurityCenter") returned 0x0
	[0186.936] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abf78, puCount=0x19f2dc | out: puCount=0x19f2dc*=0x2) returned 0x0
	[0186.936] WbemDefPath:IWbemPath:GetText (in: This=0x57abf78, lFlags=4, puBuffLength=0x19f2d8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2d8*=0x18, pszText=0x0) returned 0x0
	[0186.936] WbemDefPath:IWbemPath:GetText (in: This=0x57abf78, lFlags=4, puBuffLength=0x19f2d8*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f2d8*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0186.936] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abf78, puCount=0x19f2c8 | out: puCount=0x19f2c8*=0x2) returned 0x0
	[0186.936] WbemDefPath:IWbemPath:GetText (in: This=0x57abf78, lFlags=4, puBuffLength=0x19f2c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c4*=0x18, pszText=0x0) returned 0x0
	[0186.936] WbemDefPath:IWbemPath:GetText (in: This=0x57abf78, lFlags=4, puBuffLength=0x19f2c4*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f2c4*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0186.936] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f25c | out: ppv=0x19f25c*=0x6d0ae4) returned 0x0
	[0186.936] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f254 | out: pAptType=0x19f254*=1) returned 0x0
	[0186.936] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f258 | out: ppvObject=0x19f258*=0x0) returned 0x80004002
	[0186.937] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0186.937] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee78 | out: ppv=0x19ee78*=0x57c1418) returned 0x0
	[0186.937] WbemLocator:IUnknown:QueryInterface (in: This=0x57c1418, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f090 | out: ppvObject=0x19f090*=0x0) returned 0x80004002
	[0186.937] WbemLocator:IClassFactory:CreateInstance (in: This=0x57c1418, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x57a2d28) returned 0x0
	[0186.937] WbemLocator:IUnknown:Release (This=0x57c1418) returned 0x0
	[0186.937] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d28, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x57a2d28) returned 0x0
	[0186.938] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d28, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec80 | out: ppvObject=0x19ec80*=0x0) returned 0x80004002
	[0186.938] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d28, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e874 | out: ppvObject=0x19e874*=0x0) returned 0x80004002
	[0186.938] WbemLocator:IUnknown:AddRef (This=0x57a2d28) returned 0x3
	[0186.938] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d28, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5dc | out: ppvObject=0x19e5dc*=0x0) returned 0x80004002
	[0186.938] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d28, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e58c | out: ppvObject=0x19e58c*=0x0) returned 0x80004002
	[0186.938] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d28, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e598 | out: ppvObject=0x19e598*=0x0) returned 0x80004002
	[0186.938] CoGetContextToken (in: pToken=0x19e5f8 | out: pToken=0x19e5f8) returned 0x0
	[0186.938] CoGetContextToken (in: pToken=0x19ea00 | out: pToken=0x19ea00) returned 0x0
	[0186.938] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d28, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea90 | out: ppvObject=0x19ea90*=0x0) returned 0x80004002
	[0186.938] WbemLocator:IUnknown:Release (This=0x57a2d28) returned 0x2
	[0186.938] WbemLocator:IUnknown:Release (This=0x57a2d28) returned 0x1
	[0186.938] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0186.938] CoGetContextToken (in: pToken=0x19efd0 | out: pToken=0x19efd0) returned 0x0
	[0186.938] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d28, riid=0x19f0a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x57a2d28) returned 0x0
	[0186.938] WbemLocator:IUnknown:AddRef (This=0x57a2d28) returned 0x3
	[0186.938] WbemLocator:IUnknown:Release (This=0x57a2d28) returned 0x2
	[0186.938] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abf78, puCount=0x19f238 | out: puCount=0x19f238*=0x2) returned 0x0
	[0186.939] WbemDefPath:IWbemPath:GetText (in: This=0x57abf78, lFlags=8, puBuffLength=0x19f234*=0x0, pszText=0x0 | out: puBuffLength=0x19f234*=0x18, pszText=0x0) returned 0x0
	[0186.939] WbemDefPath:IWbemPath:GetText (in: This=0x57abf78, lFlags=8, puBuffLength=0x19f234*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f234*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0186.939] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0fc | out: ppv=0x19f0fc*=0x57a2d38) returned 0x0
	[0186.939] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2d38, strNetworkResource="\\\\.\\ROOT\\SecurityCenter", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1a4 | out: ppNamespace=0x19f1a4*=0x785d40) returned 0x0
	[0186.967] WbemLocator:IUnknown:QueryInterface (in: This=0x785d40, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f02c | out: ppvObject=0x19f02c*=0x57b13d4) returned 0x0
	[0186.967] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b13d4, pProxy=0x785d40, pAuthnSvc=0x19f07c, pAuthzSvc=0x19f078, pServerPrincName=0x19f070, pAuthnLevel=0x19f074, pImpLevel=0x19f064, pAuthInfo=0x19f068, pCapabilites=0x19f06c | out: pAuthnSvc=0x19f07c*=0xa, pAuthzSvc=0x19f078*=0x0, pServerPrincName=0x19f070, pAuthnLevel=0x19f074*=0x6, pImpLevel=0x19f064*=0x2, pAuthInfo=0x19f068, pCapabilites=0x19f06c*=0x1) returned 0x0
	[0186.967] WbemLocator:IUnknown:Release (This=0x57b13d4) returned 0x1
	[0186.967] WbemLocator:IUnknown:QueryInterface (in: This=0x785d40, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f020 | out: ppvObject=0x19f020*=0x57b13f8) returned 0x0
	[0186.967] WbemLocator:IUnknown:QueryInterface (in: This=0x785d40, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f01c | out: ppvObject=0x19f01c*=0x57b13d4) returned 0x0
	[0186.968] WbemLocator:IClientSecurity:SetBlanket (This=0x57b13d4, pProxy=0x785d40, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.968] WbemLocator:IUnknown:Release (This=0x57b13d4) returned 0x2
	[0186.968] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x1
	[0186.968] CoTaskMemFree (pv=0x57b7e10) 
	[0186.968] WbemLocator:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0186.968] WbemLocator:IUnknown:QueryInterface (in: This=0x785d40, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x57b13f8) returned 0x0
	[0186.968] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebd8 | out: ppvObject=0x19ebd8*=0x0) returned 0x80004002
	[0186.969] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9f4 | out: ppvObject=0x19e9f4*=0x0) returned 0x80004002
	[0186.969] WbemLocator:IUnknown:QueryInterface (in: This=0x785d40, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7cc | out: ppvObject=0x19e7cc*=0x0) returned 0x80004002
	[0186.969] WbemLocator:IUnknown:AddRef (This=0x57b13f8) returned 0x3
	[0186.970] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0186.970] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4e4 | out: ppvObject=0x19e4e4*=0x0) returned 0x80004002
	[0186.970] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4f0 | out: ppvObject=0x19e4f0*=0x57b1354) returned 0x0
	[0186.970] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1354, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4f8 | out: pCid=0x19e4f8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.970] WbemLocator:IUnknown:Release (This=0x57b1354) returned 0x3
	[0186.970] CoGetContextToken (in: pToken=0x19e550 | out: pToken=0x19e550) returned 0x0
	[0186.970] CoGetContextToken (in: pToken=0x19e958 | out: pToken=0x19e958) returned 0x0
	[0186.970] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9e8 | out: ppvObject=0x19e9e8*=0x57b13dc) returned 0x0
	[0186.970] WbemLocator:IRpcOptions:Query (in: This=0x57b13dc, pPrx=0x57b13f8, dwProperty=2, pdwValue=0x19ea10 | out: pdwValue=0x19ea10) returned 0x80004002
	[0186.970] WbemLocator:IUnknown:Release (This=0x57b13dc) returned 0x3
	[0186.970] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x2
	[0186.970] CoGetContextToken (in: pToken=0x19ef30 | out: pToken=0x19ef30) returned 0x0
	[0186.970] CoGetContextToken (in: pToken=0x19ee90 | out: pToken=0x19ee90) returned 0x0
	[0186.970] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x19ef60*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef5c | out: ppvObject=0x19ef5c*=0x785d40) returned 0x0
	[0186.970] WbemLocator:IUnknown:AddRef (This=0x785d40) returned 0x4
	[0186.970] WbemLocator:IUnknown:Release (This=0x785d40) returned 0x3
	[0186.970] WbemLocator:IUnknown:Release (This=0x785d40) returned 0x2
	[0186.970] SysStringLen (param_1=0x0) returned 0x0
	[0186.971] CoGetContextToken (in: pToken=0x19ef38 | out: pToken=0x19ef38) returned 0x0
	[0186.971] WbemLocator:IUnknown:AddRef (This=0x57b13f8) returned 0x3
	[0186.971] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edcc | out: ppvObject=0x19edcc*=0x57b13f8) returned 0x0
	[0186.971] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x3
	[0186.971] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x2
	[0186.971] CoGetContextToken (in: pToken=0x19f030 | out: pToken=0x19f030) returned 0x0
	[0186.971] WbemLocator:IUnknown:AddRef (This=0x785d40) returned 0x3
	[0186.971] IWbemServices:ExecQuery (in: This=0x785d40, strQueryLanguage="WQL", strQuery="SELECT * FROM AntiSpyWareProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f240 | out: ppEnum=0x19f240*=0x78afb0) returned 0x0
	[0186.973] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a0 | out: ppvObject=0x19f0a0*=0x78afb4) returned 0x0
	[0186.973] IClientSecurity:QueryBlanket (in: This=0x78afb4, pProxy=0x78afb0, pAuthnSvc=0x19f0f0, pAuthzSvc=0x19f0ec, pServerPrincName=0x19f0e4, pAuthnLevel=0x19f0e8, pImpLevel=0x19f0d8, pAuthInfo=0x19f0dc, pCapabilites=0x19f0e0 | out: pAuthnSvc=0x19f0f0*=0xa, pAuthzSvc=0x19f0ec*=0x0, pServerPrincName=0x19f0e4, pAuthnLevel=0x19f0e8*=0x6, pImpLevel=0x19f0d8*=0x2, pAuthInfo=0x19f0dc, pCapabilites=0x19f0e0*=0x1) returned 0x0
	[0186.973] IUnknown:Release (This=0x78afb4) returned 0x1
	[0186.973] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f094 | out: ppvObject=0x19f094*=0x57b0bf8) returned 0x0
	[0186.974] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f090 | out: ppvObject=0x19f090*=0x78afb4) returned 0x0
	[0186.974] IClientSecurity:SetBlanket (This=0x78afb4, pProxy=0x78afb0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.981] IUnknown:Release (This=0x78afb4) returned 0x2
	[0186.981] WbemLocator:IUnknown:Release (This=0x57b0bf8) returned 0x1
	[0186.981] CoTaskMemFree (pv=0x57b7e10) 
	[0186.982] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec8c | out: ppvObject=0x19ec8c*=0x57b0bf8) returned 0x0
	[0186.982] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec48 | out: ppvObject=0x19ec48*=0x0) returned 0x80004002
	[0186.982] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea64 | out: ppvObject=0x19ea64*=0x0) returned 0x80004002
	[0186.983] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e83c | out: ppvObject=0x19e83c*=0x0) returned 0x80004002
	[0186.983] WbemLocator:IUnknown:AddRef (This=0x57b0bf8) returned 0x3
	[0186.983] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5a4 | out: ppvObject=0x19e5a4*=0x0) returned 0x80004002
	[0186.983] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e554 | out: ppvObject=0x19e554*=0x0) returned 0x80004002
	[0186.983] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e560 | out: ppvObject=0x19e560*=0x57b0b54) returned 0x0
	[0186.984] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0b54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e568 | out: pCid=0x19e568*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.984] WbemLocator:IUnknown:Release (This=0x57b0b54) returned 0x3
	[0186.984] CoGetContextToken (in: pToken=0x19e5c0 | out: pToken=0x19e5c0) returned 0x0
	[0186.984] CoGetContextToken (in: pToken=0x19e9c8 | out: pToken=0x19e9c8) returned 0x0
	[0186.984] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea58 | out: ppvObject=0x19ea58*=0x57b0bdc) returned 0x0
	[0186.984] WbemLocator:IRpcOptions:Query (in: This=0x57b0bdc, pPrx=0x57b0bf8, dwProperty=2, pdwValue=0x19ea80 | out: pdwValue=0x19ea80) returned 0x80004002
	[0186.986] WbemLocator:IUnknown:Release (This=0x57b0bdc) returned 0x3
	[0186.986] WbemLocator:IUnknown:Release (This=0x57b0bf8) returned 0x2
	[0186.986] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0186.986] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0186.986] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0bf8, riid=0x19efd0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efcc | out: ppvObject=0x19efcc*=0x78afb0) returned 0x0
	[0186.986] IUnknown:AddRef (This=0x78afb0) returned 0x4
	[0186.986] IUnknown:Release (This=0x78afb0) returned 0x3
	[0186.986] IUnknown:Release (This=0x78afb0) returned 0x2
	[0186.986] WbemLocator:IUnknown:Release (This=0x785d40) returned 0x2
	[0186.986] SysStringLen (param_1=0x0) returned 0x0
	[0186.986] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57abf78, puCount=0x19f28c | out: puCount=0x19f28c*=0x2) returned 0x0
	[0186.986] WbemDefPath:IWbemPath:GetText (in: This=0x57abf78, lFlags=4, puBuffLength=0x19f288*=0x0, pszText=0x0 | out: puBuffLength=0x19f288*=0x18, pszText=0x0) returned 0x0
	[0186.986] WbemDefPath:IWbemPath:GetText (in: This=0x57abf78, lFlags=4, puBuffLength=0x19f288*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f288*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0186.986] CoGetContextToken (in: pToken=0x19f0d8 | out: pToken=0x19f0d8) returned 0x0
	[0186.986] IUnknown:AddRef (This=0x78afb0) returned 0x3
	[0186.986] IEnumWbemClassObject:Clone (in: This=0x78afb0, ppEnum=0x19f298 | out: ppEnum=0x19f298*=0x78a3f8) returned 0x0
	[0186.988] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x78a3fc) returned 0x0
	[0186.988] IClientSecurity:QueryBlanket (in: This=0x78a3fc, pProxy=0x78a3f8, pAuthnSvc=0x19f1ac, pAuthzSvc=0x19f1a8, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4, pImpLevel=0x19f194, pAuthInfo=0x19f198, pCapabilites=0x19f19c | out: pAuthnSvc=0x19f1ac*=0xa, pAuthzSvc=0x19f1a8*=0x0, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4*=0x6, pImpLevel=0x19f194*=0x2, pAuthInfo=0x19f198, pCapabilites=0x19f19c*=0x1) returned 0x0
	[0186.988] IUnknown:Release (This=0x78a3fc) returned 0x1
	[0186.988] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f150 | out: ppvObject=0x19f150*=0x57b1cf8) returned 0x0
	[0186.988] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f14c | out: ppvObject=0x19f14c*=0x78a3fc) returned 0x0
	[0186.988] IClientSecurity:SetBlanket (This=0x78a3fc, pProxy=0x78a3f8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0186.993] IUnknown:Release (This=0x78a3fc) returned 0x2
	[0186.994] WbemLocator:IUnknown:Release (This=0x57b1cf8) returned 0x1
	[0186.994] CoTaskMemFree (pv=0x57b7ff0) 
	[0186.994] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed38 | out: ppvObject=0x19ed38*=0x57b1cf8) returned 0x0
	[0186.994] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecf4 | out: ppvObject=0x19ecf4*=0x0) returned 0x80004002
	[0186.994] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb14 | out: ppvObject=0x19eb14*=0x0) returned 0x80004002
	[0186.995] IUnknown:QueryInterface (in: This=0x78a3f8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8ec | out: ppvObject=0x19e8ec*=0x0) returned 0x80004002
	[0186.996] WbemLocator:IUnknown:AddRef (This=0x57b1cf8) returned 0x3
	[0186.996] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0186.996] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e604 | out: ppvObject=0x19e604*=0x0) returned 0x80004002
	[0186.996] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e610 | out: ppvObject=0x19e610*=0x57b1c54) returned 0x0
	[0186.996] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1c54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e618 | out: pCid=0x19e618*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0186.996] WbemLocator:IUnknown:Release (This=0x57b1c54) returned 0x3
	[0186.996] CoGetContextToken (in: pToken=0x19e670 | out: pToken=0x19e670) returned 0x0
	[0186.996] CoGetContextToken (in: pToken=0x19ea78 | out: pToken=0x19ea78) returned 0x0
	[0186.996] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb08 | out: ppvObject=0x19eb08*=0x57b1cdc) returned 0x0
	[0186.996] WbemLocator:IRpcOptions:Query (in: This=0x57b1cdc, pPrx=0x57b1cf8, dwProperty=2, pdwValue=0x19eb30 | out: pdwValue=0x19eb30) returned 0x80004002
	[0186.996] WbemLocator:IUnknown:Release (This=0x57b1cdc) returned 0x3
	[0186.996] WbemLocator:IUnknown:Release (This=0x57b1cf8) returned 0x2
	[0186.996] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0186.997] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0186.997] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x19f078*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x78a3f8) returned 0x0
	[0186.997] IUnknown:AddRef (This=0x78a3f8) returned 0x4
	[0186.997] IUnknown:Release (This=0x78a3f8) returned 0x3
	[0186.997] IUnknown:Release (This=0x78a3f8) returned 0x2
	[0186.997] IUnknown:Release (This=0x78afb0) returned 0x2
	[0186.997] SysStringLen (param_1=0x0) returned 0x0
	[0186.997] IEnumWbemClassObject:Reset (This=0x78a3f8) returned 0x0
	[0186.997] CoTaskMemAlloc (cb=0x4) returned 0x57a2ce8
	[0186.997] IEnumWbemClassObject:Next (in: This=0x78a3f8, lTimeout=-1, uCount=0x1, apObjects=0x57a2ce8, puReturned=0x28aaf94 | out: apObjects=0x57a2ce8*=0x0, puReturned=0x28aaf94*=0x0) returned 0x1
	[0186.998] CoTaskMemFree (pv=0x57a2ce8) 
	[0186.998] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0186.998] WbemLocator:IUnknown:Release (This=0x57b1cf8) returned 0x1
	[0186.998] IUnknown:Release (This=0x78a3f8) returned 0x0
	[0186.999] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0186.999] WbemLocator:IUnknown:Release (This=0x57b0bf8) returned 0x1
	[0186.999] IUnknown:Release (This=0x78afb0) returned 0x0
	[0187.000] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2b4 | out: ppv=0x19f2b4*=0x6d0ae4) returned 0x0
	[0187.001] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2ac | out: pAptType=0x19f2ac*=1) returned 0x0
	[0187.001] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x0) returned 0x80004002
	[0187.001] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0187.001] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec20 | out: ppv=0x19ec20*=0x57a2d98) returned 0x0
	[0187.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d98, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee38 | out: ppvObject=0x19ee38*=0x0) returned 0x80004002
	[0187.002] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d98, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee4c | out: ppvObject=0x19ee4c*=0x57ac8a8) returned 0x0
	[0187.002] WbemDefPath:IUnknown:Release (This=0x57a2d98) returned 0x0
	[0187.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x57ac8a8) returned 0x0
	[0187.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x0) returned 0x80004002
	[0187.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e61c | out: ppvObject=0x19e61c*=0x0) returned 0x80004002
	[0187.002] WbemDefPath:IUnknown:AddRef (This=0x57ac8a8) returned 0x3
	[0187.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e384 | out: ppvObject=0x19e384*=0x0) returned 0x80004002
	[0187.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e334 | out: ppvObject=0x19e334*=0x0) returned 0x80004002
	[0187.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e340 | out: ppvObject=0x19e340*=0x57c1418) returned 0x0
	[0187.002] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c1418, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e348 | out: pCid=0x19e348*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0187.002] WbemDefPath:IUnknown:Release (This=0x57c1418) returned 0x3
	[0187.002] CoGetContextToken (in: pToken=0x19e3a0 | out: pToken=0x19e3a0) returned 0x0
	[0187.002] CoGetContextToken (in: pToken=0x19e7a8 | out: pToken=0x19e7a8) returned 0x0
	[0187.003] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e838 | out: ppvObject=0x19e838*=0x0) returned 0x80004002
	[0187.003] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x2
	[0187.003] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x1
	[0187.003] CoGetContextToken (in: pToken=0x19f130 | out: pToken=0x19f130) returned 0x0
	[0187.003] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0187.003] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x19f160*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x57ac8a8) returned 0x0
	[0187.003] WbemDefPath:IUnknown:AddRef (This=0x57ac8a8) returned 0x3
	[0187.003] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x2
	[0187.003] WbemDefPath:IWbemPath:SetText (This=0x57ac8a8, uMode=0x4, pszPath="ROOT\\SecurityCenter2") returned 0x0
	[0187.003] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57ac8a8, puCount=0x19f2dc | out: puCount=0x19f2dc*=0x2) returned 0x0
	[0187.003] WbemDefPath:IWbemPath:GetText (in: This=0x57ac8a8, lFlags=4, puBuffLength=0x19f2d8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2d8*=0x19, pszText=0x0) returned 0x0
	[0187.003] WbemDefPath:IWbemPath:GetText (in: This=0x57ac8a8, lFlags=4, puBuffLength=0x19f2d8*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2d8*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0187.003] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57ac8a8, puCount=0x19f2c8 | out: puCount=0x19f2c8*=0x2) returned 0x0
	[0187.003] WbemDefPath:IWbemPath:GetText (in: This=0x57ac8a8, lFlags=4, puBuffLength=0x19f2c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c4*=0x19, pszText=0x0) returned 0x0
	[0187.004] WbemDefPath:IWbemPath:GetText (in: This=0x57ac8a8, lFlags=4, puBuffLength=0x19f2c4*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2c4*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0187.004] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f25c | out: ppv=0x19f25c*=0x6d0ae4) returned 0x0
	[0187.004] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f254 | out: pAptType=0x19f254*=1) returned 0x0
	[0187.004] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f258 | out: ppvObject=0x19f258*=0x0) returned 0x80004002
	[0187.004] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0187.006] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee78 | out: ppv=0x19ee78*=0x57c14d8) returned 0x0
	[0187.007] WbemLocator:IUnknown:QueryInterface (in: This=0x57c14d8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f090 | out: ppvObject=0x19f090*=0x0) returned 0x80004002
	[0187.007] WbemLocator:IClassFactory:CreateInstance (in: This=0x57c14d8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x57a2d98) returned 0x0
	[0187.007] WbemLocator:IUnknown:Release (This=0x57c14d8) returned 0x0
	[0187.007] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d98, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x57a2d98) returned 0x0
	[0187.007] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d98, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec80 | out: ppvObject=0x19ec80*=0x0) returned 0x80004002
	[0187.007] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d98, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e874 | out: ppvObject=0x19e874*=0x0) returned 0x80004002
	[0187.007] WbemLocator:IUnknown:AddRef (This=0x57a2d98) returned 0x3
	[0187.007] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d98, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5dc | out: ppvObject=0x19e5dc*=0x0) returned 0x80004002
	[0187.007] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d98, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e58c | out: ppvObject=0x19e58c*=0x0) returned 0x80004002
	[0187.007] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d98, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e598 | out: ppvObject=0x19e598*=0x0) returned 0x80004002
	[0187.007] CoGetContextToken (in: pToken=0x19e5f8 | out: pToken=0x19e5f8) returned 0x0
	[0187.007] CoGetContextToken (in: pToken=0x19ea00 | out: pToken=0x19ea00) returned 0x0
	[0187.007] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d98, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea90 | out: ppvObject=0x19ea90*=0x0) returned 0x80004002
	[0187.007] WbemLocator:IUnknown:Release (This=0x57a2d98) returned 0x2
	[0187.008] WbemLocator:IUnknown:Release (This=0x57a2d98) returned 0x1
	[0187.008] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0187.008] CoGetContextToken (in: pToken=0x19efd0 | out: pToken=0x19efd0) returned 0x0
	[0187.008] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d98, riid=0x19f0a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x57a2d98) returned 0x0
	[0187.008] WbemLocator:IUnknown:AddRef (This=0x57a2d98) returned 0x3
	[0187.008] WbemLocator:IUnknown:Release (This=0x57a2d98) returned 0x2
	[0187.008] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57ac8a8, puCount=0x19f238 | out: puCount=0x19f238*=0x2) returned 0x0
	[0187.008] WbemDefPath:IWbemPath:GetText (in: This=0x57ac8a8, lFlags=8, puBuffLength=0x19f234*=0x0, pszText=0x0 | out: puBuffLength=0x19f234*=0x19, pszText=0x0) returned 0x0
	[0187.008] WbemDefPath:IWbemPath:GetText (in: This=0x57ac8a8, lFlags=8, puBuffLength=0x19f234*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f234*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0187.008] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0fc | out: ppv=0x19f0fc*=0x57a2d38) returned 0x0
	[0187.008] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2d38, strNetworkResource="\\\\.\\ROOT\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1a4 | out: ppNamespace=0x19f1a4*=0x785b10) returned 0x0
	[0187.036] WbemLocator:IUnknown:QueryInterface (in: This=0x785b10, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f02c | out: ppvObject=0x19f02c*=0x57b19d4) returned 0x0
	[0187.036] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b19d4, pProxy=0x785b10, pAuthnSvc=0x19f07c, pAuthzSvc=0x19f078, pServerPrincName=0x19f070, pAuthnLevel=0x19f074, pImpLevel=0x19f064, pAuthInfo=0x19f068, pCapabilites=0x19f06c | out: pAuthnSvc=0x19f07c*=0xa, pAuthzSvc=0x19f078*=0x0, pServerPrincName=0x19f070, pAuthnLevel=0x19f074*=0x6, pImpLevel=0x19f064*=0x2, pAuthInfo=0x19f068, pCapabilites=0x19f06c*=0x1) returned 0x0
	[0187.036] WbemLocator:IUnknown:Release (This=0x57b19d4) returned 0x1
	[0187.036] WbemLocator:IUnknown:QueryInterface (in: This=0x785b10, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f020 | out: ppvObject=0x19f020*=0x57b19f8) returned 0x0
	[0187.036] WbemLocator:IUnknown:QueryInterface (in: This=0x785b10, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f01c | out: ppvObject=0x19f01c*=0x57b19d4) returned 0x0
	[0187.036] WbemLocator:IClientSecurity:SetBlanket (This=0x57b19d4, pProxy=0x785b10, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0187.036] WbemLocator:IUnknown:Release (This=0x57b19d4) returned 0x2
	[0187.036] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x1
	[0187.036] CoTaskMemFree (pv=0x57b7ff0) 
	[0187.037] WbemLocator:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0187.037] WbemLocator:IUnknown:QueryInterface (in: This=0x785b10, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x57b19f8) returned 0x0
	[0187.037] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebd8 | out: ppvObject=0x19ebd8*=0x0) returned 0x80004002
	[0187.040] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9f4 | out: ppvObject=0x19e9f4*=0x0) returned 0x80004002
	[0187.040] WbemLocator:IUnknown:QueryInterface (in: This=0x785b10, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7cc | out: ppvObject=0x19e7cc*=0x0) returned 0x80004002
	[0187.041] WbemLocator:IUnknown:AddRef (This=0x57b19f8) returned 0x3
	[0187.041] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0187.041] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4e4 | out: ppvObject=0x19e4e4*=0x0) returned 0x80004002
	[0187.041] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4f0 | out: ppvObject=0x19e4f0*=0x57b1954) returned 0x0
	[0187.041] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1954, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4f8 | out: pCid=0x19e4f8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0187.042] WbemLocator:IUnknown:Release (This=0x57b1954) returned 0x3
	[0187.042] CoGetContextToken (in: pToken=0x19e550 | out: pToken=0x19e550) returned 0x0
	[0187.042] CoGetContextToken (in: pToken=0x19e958 | out: pToken=0x19e958) returned 0x0
	[0187.042] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9e8 | out: ppvObject=0x19e9e8*=0x57b19dc) returned 0x0
	[0187.042] WbemLocator:IRpcOptions:Query (in: This=0x57b19dc, pPrx=0x57b19f8, dwProperty=2, pdwValue=0x19ea10 | out: pdwValue=0x19ea10) returned 0x80004002
	[0187.042] WbemLocator:IUnknown:Release (This=0x57b19dc) returned 0x3
	[0187.042] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x2
	[0187.042] CoGetContextToken (in: pToken=0x19ef30 | out: pToken=0x19ef30) returned 0x0
	[0187.042] CoGetContextToken (in: pToken=0x19ee90 | out: pToken=0x19ee90) returned 0x0
	[0187.042] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x19ef60*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef5c | out: ppvObject=0x19ef5c*=0x785b10) returned 0x0
	[0187.042] WbemLocator:IUnknown:AddRef (This=0x785b10) returned 0x4
	[0187.042] WbemLocator:IUnknown:Release (This=0x785b10) returned 0x3
	[0187.042] WbemLocator:IUnknown:Release (This=0x785b10) returned 0x2
	[0187.042] SysStringLen (param_1=0x0) returned 0x0
	[0187.042] CoGetContextToken (in: pToken=0x19ef38 | out: pToken=0x19ef38) returned 0x0
	[0187.042] WbemLocator:IUnknown:AddRef (This=0x57b19f8) returned 0x3
	[0187.042] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edcc | out: ppvObject=0x19edcc*=0x57b19f8) returned 0x0
	[0187.043] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x3
	[0187.043] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x2
	[0187.043] CoGetContextToken (in: pToken=0x19f030 | out: pToken=0x19f030) returned 0x0
	[0187.043] WbemLocator:IUnknown:AddRef (This=0x785b10) returned 0x3
	[0187.043] IWbemServices:ExecQuery (in: This=0x785b10, strQueryLanguage="WQL", strQuery="SELECT * FROM FirewallProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f240 | out: ppEnum=0x19f240*=0x78ad58) returned 0x0
	[0187.053] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x78ad5c) returned 0x0
	[0187.053] IClientSecurity:QueryBlanket (in: This=0x78ad5c, pProxy=0x78ad58, pAuthnSvc=0x19f0f4, pAuthzSvc=0x19f0f0, pServerPrincName=0x19f0e8, pAuthnLevel=0x19f0ec, pImpLevel=0x19f0dc, pAuthInfo=0x19f0e0, pCapabilites=0x19f0e4 | out: pAuthnSvc=0x19f0f4*=0xa, pAuthzSvc=0x19f0f0*=0x0, pServerPrincName=0x19f0e8, pAuthnLevel=0x19f0ec*=0x6, pImpLevel=0x19f0dc*=0x2, pAuthInfo=0x19f0e0, pCapabilites=0x19f0e4*=0x1) returned 0x0
	[0187.053] IUnknown:Release (This=0x78ad5c) returned 0x1
	[0187.053] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f098 | out: ppvObject=0x19f098*=0x57b15f8) returned 0x0
	[0187.054] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f094 | out: ppvObject=0x19f094*=0x78ad5c) returned 0x0
	[0187.054] IClientSecurity:SetBlanket (This=0x78ad5c, pProxy=0x78ad58, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0187.056] IUnknown:Release (This=0x78ad5c) returned 0x2
	[0187.056] WbemLocator:IUnknown:Release (This=0x57b15f8) returned 0x1
	[0187.056] CoTaskMemFree (pv=0x57b7c30) 
	[0187.056] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec90 | out: ppvObject=0x19ec90*=0x57b15f8) returned 0x0
	[0187.056] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec4c | out: ppvObject=0x19ec4c*=0x0) returned 0x80004002
	[0187.057] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x0) returned 0x80004002
	[0187.057] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0187.058] WbemLocator:IUnknown:AddRef (This=0x57b15f8) returned 0x3
	[0187.058] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0187.058] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0187.058] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x57b1554) returned 0x0
	[0187.058] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1554, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e570 | out: pCid=0x19e570*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0187.058] WbemLocator:IUnknown:Release (This=0x57b1554) returned 0x3
	[0187.058] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0187.058] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0187.058] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x57b15dc) returned 0x0
	[0187.058] WbemLocator:IRpcOptions:Query (in: This=0x57b15dc, pPrx=0x57b15f8, dwProperty=2, pdwValue=0x19ea88 | out: pdwValue=0x19ea88) returned 0x80004002
	[0187.059] WbemLocator:IUnknown:Release (This=0x57b15dc) returned 0x3
	[0187.059] WbemLocator:IUnknown:Release (This=0x57b15f8) returned 0x2
	[0187.059] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0187.059] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0187.059] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x19efd0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efcc | out: ppvObject=0x19efcc*=0x78ad58) returned 0x0
	[0187.059] IUnknown:AddRef (This=0x78ad58) returned 0x4
	[0187.059] IUnknown:Release (This=0x78ad58) returned 0x3
	[0187.059] IUnknown:Release (This=0x78ad58) returned 0x2
	[0187.059] WbemLocator:IUnknown:Release (This=0x785b10) returned 0x2
	[0187.059] SysStringLen (param_1=0x0) returned 0x0
	[0187.059] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57ac8a8, puCount=0x19f28c | out: puCount=0x19f28c*=0x2) returned 0x0
	[0187.059] WbemDefPath:IWbemPath:GetText (in: This=0x57ac8a8, lFlags=4, puBuffLength=0x19f288*=0x0, pszText=0x0 | out: puBuffLength=0x19f288*=0x19, pszText=0x0) returned 0x0
	[0187.059] WbemDefPath:IWbemPath:GetText (in: This=0x57ac8a8, lFlags=4, puBuffLength=0x19f288*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f288*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0187.059] CoGetContextToken (in: pToken=0x19f0d8 | out: pToken=0x19f0d8) returned 0x0
	[0187.059] IUnknown:AddRef (This=0x78ad58) returned 0x3
	[0187.059] IEnumWbemClassObject:Clone (in: This=0x78ad58, ppEnum=0x19f298 | out: ppEnum=0x19f298*=0x78b078) returned 0x0
	[0187.061] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x78b07c) returned 0x0
	[0187.061] IClientSecurity:QueryBlanket (in: This=0x78b07c, pProxy=0x78b078, pAuthnSvc=0x19f1ac, pAuthzSvc=0x19f1a8, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4, pImpLevel=0x19f194, pAuthInfo=0x19f198, pCapabilites=0x19f19c | out: pAuthnSvc=0x19f1ac*=0xa, pAuthzSvc=0x19f1a8*=0x0, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4*=0x6, pImpLevel=0x19f194*=0x2, pAuthInfo=0x19f198, pCapabilites=0x19f19c*=0x1) returned 0x0
	[0187.061] IUnknown:Release (This=0x78b07c) returned 0x1
	[0187.061] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f150 | out: ppvObject=0x19f150*=0x57b04f8) returned 0x0
	[0187.061] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f14c | out: ppvObject=0x19f14c*=0x78b07c) returned 0x0
	[0187.061] IClientSecurity:SetBlanket (This=0x78b07c, pProxy=0x78b078, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0187.063] IUnknown:Release (This=0x78b07c) returned 0x2
	[0187.063] WbemLocator:IUnknown:Release (This=0x57b04f8) returned 0x1
	[0187.063] CoTaskMemFree (pv=0x57b7e10) 
	[0187.063] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed38 | out: ppvObject=0x19ed38*=0x57b04f8) returned 0x0
	[0187.063] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecf4 | out: ppvObject=0x19ecf4*=0x0) returned 0x80004002
	[0187.064] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb14 | out: ppvObject=0x19eb14*=0x0) returned 0x80004002
	[0187.064] IUnknown:QueryInterface (in: This=0x78b078, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8ec | out: ppvObject=0x19e8ec*=0x0) returned 0x80004002
	[0187.064] WbemLocator:IUnknown:AddRef (This=0x57b04f8) returned 0x3
	[0187.064] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0187.064] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e604 | out: ppvObject=0x19e604*=0x0) returned 0x80004002
	[0187.065] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e610 | out: ppvObject=0x19e610*=0x57b0454) returned 0x0
	[0187.065] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0454, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e618 | out: pCid=0x19e618*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0187.065] WbemLocator:IUnknown:Release (This=0x57b0454) returned 0x3
	[0187.065] CoGetContextToken (in: pToken=0x19e670 | out: pToken=0x19e670) returned 0x0
	[0187.065] CoGetContextToken (in: pToken=0x19ea78 | out: pToken=0x19ea78) returned 0x0
	[0187.065] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb08 | out: ppvObject=0x19eb08*=0x57b04dc) returned 0x0
	[0187.065] WbemLocator:IRpcOptions:Query (in: This=0x57b04dc, pPrx=0x57b04f8, dwProperty=2, pdwValue=0x19eb30 | out: pdwValue=0x19eb30) returned 0x80004002
	[0187.065] WbemLocator:IUnknown:Release (This=0x57b04dc) returned 0x3
	[0187.065] WbemLocator:IUnknown:Release (This=0x57b04f8) returned 0x2
	[0187.065] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0187.065] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0187.065] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x19f078*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x78b078) returned 0x0
	[0187.065] IUnknown:AddRef (This=0x78b078) returned 0x4
	[0187.065] IUnknown:Release (This=0x78b078) returned 0x3
	[0187.065] IUnknown:Release (This=0x78b078) returned 0x2
	[0187.065] IUnknown:Release (This=0x78ad58) returned 0x2
	[0187.065] SysStringLen (param_1=0x0) returned 0x0
	[0187.065] IEnumWbemClassObject:Reset (This=0x78b078) returned 0x0
	[0187.066] CoTaskMemAlloc (cb=0x4) returned 0x57a2e98
	[0187.066] IEnumWbemClassObject:Next (in: This=0x78b078, lTimeout=-1, uCount=0x1, apObjects=0x57a2e98, puReturned=0x28abff8 | out: apObjects=0x57a2e98*=0x0, puReturned=0x28abff8*=0x0) returned 0x1
	[0187.067] CoTaskMemFree (pv=0x57a2e98) 
	[0187.067] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0187.067] WbemLocator:IUnknown:Release (This=0x57b04f8) returned 0x1
	[0187.067] IUnknown:Release (This=0x78b078) returned 0x0
	[0187.069] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0187.069] WbemLocator:IUnknown:Release (This=0x57b15f8) returned 0x1
	[0187.069] IUnknown:Release (This=0x78ad58) returned 0x0
	[0187.070] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2b4 | out: ppv=0x19f2b4*=0x6d0ae4) returned 0x0
	[0187.070] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2ac | out: pAptType=0x19f2ac*=1) returned 0x0
	[0187.070] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x0) returned 0x80004002
	[0187.070] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0187.072] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec20 | out: ppv=0x19ec20*=0x57a2d38) returned 0x0
	[0187.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee38 | out: ppvObject=0x19ee38*=0x0) returned 0x80004002
	[0187.073] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee4c | out: ppvObject=0x19ee4c*=0x57acad8) returned 0x0
	[0187.073] WbemDefPath:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0187.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x57acad8) returned 0x0
	[0187.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x0) returned 0x80004002
	[0187.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e61c | out: ppvObject=0x19e61c*=0x0) returned 0x80004002
	[0187.073] WbemDefPath:IUnknown:AddRef (This=0x57acad8) returned 0x3
	[0187.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e384 | out: ppvObject=0x19e384*=0x0) returned 0x80004002
	[0187.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e334 | out: ppvObject=0x19e334*=0x0) returned 0x80004002
	[0187.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e340 | out: ppvObject=0x19e340*=0x57c1850) returned 0x0
	[0187.073] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c1850, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e348 | out: pCid=0x19e348*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0187.073] WbemDefPath:IUnknown:Release (This=0x57c1850) returned 0x3
	[0187.074] CoGetContextToken (in: pToken=0x19e3a0 | out: pToken=0x19e3a0) returned 0x0
	[0187.074] CoGetContextToken (in: pToken=0x19e7a8 | out: pToken=0x19e7a8) returned 0x0
	[0187.074] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e838 | out: ppvObject=0x19e838*=0x0) returned 0x80004002
	[0187.074] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x2
	[0187.074] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x1
	[0187.074] CoGetContextToken (in: pToken=0x19f130 | out: pToken=0x19f130) returned 0x0
	[0187.074] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0187.074] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x19f160*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x57acad8) returned 0x0
	[0187.074] WbemDefPath:IUnknown:AddRef (This=0x57acad8) returned 0x3
	[0187.074] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x2
	[0187.074] WbemDefPath:IWbemPath:SetText (This=0x57acad8, uMode=0x4, pszPath="ROOT\\SecurityCenter") returned 0x0
	[0187.074] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57acad8, puCount=0x19f2dc | out: puCount=0x19f2dc*=0x2) returned 0x0
	[0187.074] WbemDefPath:IWbemPath:GetText (in: This=0x57acad8, lFlags=4, puBuffLength=0x19f2d8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2d8*=0x18, pszText=0x0) returned 0x0
	[0187.074] WbemDefPath:IWbemPath:GetText (in: This=0x57acad8, lFlags=4, puBuffLength=0x19f2d8*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f2d8*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0187.074] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57acad8, puCount=0x19f2c8 | out: puCount=0x19f2c8*=0x2) returned 0x0
	[0187.074] WbemDefPath:IWbemPath:GetText (in: This=0x57acad8, lFlags=4, puBuffLength=0x19f2c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c4*=0x18, pszText=0x0) returned 0x0
	[0187.074] WbemDefPath:IWbemPath:GetText (in: This=0x57acad8, lFlags=4, puBuffLength=0x19f2c4*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f2c4*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0187.074] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f25c | out: ppv=0x19f25c*=0x6d0ae4) returned 0x0
	[0187.075] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f254 | out: pAptType=0x19f254*=1) returned 0x0
	[0187.075] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f258 | out: ppvObject=0x19f258*=0x0) returned 0x80004002
	[0187.075] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0187.075] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee78 | out: ppv=0x19ee78*=0x57c1640) returned 0x0
	[0187.076] WbemLocator:IUnknown:QueryInterface (in: This=0x57c1640, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f090 | out: ppvObject=0x19f090*=0x0) returned 0x80004002
	[0187.076] WbemLocator:IClassFactory:CreateInstance (in: This=0x57c1640, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x57a2d38) returned 0x0
	[0187.076] WbemLocator:IUnknown:Release (This=0x57c1640) returned 0x0
	[0187.076] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x57a2d38) returned 0x0
	[0187.076] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec80 | out: ppvObject=0x19ec80*=0x0) returned 0x80004002
	[0187.076] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e874 | out: ppvObject=0x19e874*=0x0) returned 0x80004002
	[0187.076] WbemLocator:IUnknown:AddRef (This=0x57a2d38) returned 0x3
	[0187.076] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5dc | out: ppvObject=0x19e5dc*=0x0) returned 0x80004002
	[0187.076] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e58c | out: ppvObject=0x19e58c*=0x0) returned 0x80004002
	[0187.076] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e598 | out: ppvObject=0x19e598*=0x0) returned 0x80004002
	[0187.076] CoGetContextToken (in: pToken=0x19e5f8 | out: pToken=0x19e5f8) returned 0x0
	[0187.076] CoGetContextToken (in: pToken=0x19ea00 | out: pToken=0x19ea00) returned 0x0
	[0187.076] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea90 | out: ppvObject=0x19ea90*=0x0) returned 0x80004002
	[0187.077] WbemLocator:IUnknown:Release (This=0x57a2d38) returned 0x2
	[0187.077] WbemLocator:IUnknown:Release (This=0x57a2d38) returned 0x1
	[0187.077] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0187.077] CoGetContextToken (in: pToken=0x19efd0 | out: pToken=0x19efd0) returned 0x0
	[0187.077] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x19f0a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x57a2d38) returned 0x0
	[0187.077] WbemLocator:IUnknown:AddRef (This=0x57a2d38) returned 0x3
	[0187.077] WbemLocator:IUnknown:Release (This=0x57a2d38) returned 0x2
	[0187.077] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57acad8, puCount=0x19f238 | out: puCount=0x19f238*=0x2) returned 0x0
	[0187.077] WbemDefPath:IWbemPath:GetText (in: This=0x57acad8, lFlags=8, puBuffLength=0x19f234*=0x0, pszText=0x0 | out: puBuffLength=0x19f234*=0x18, pszText=0x0) returned 0x0
	[0187.077] WbemDefPath:IWbemPath:GetText (in: This=0x57acad8, lFlags=8, puBuffLength=0x19f234*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f234*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0187.077] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0fc | out: ppv=0x19f0fc*=0x57a2e18) returned 0x0
	[0187.077] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2e18, strNetworkResource="\\\\.\\ROOT\\SecurityCenter", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1a4 | out: ppNamespace=0x19f1a4*=0x785cf0) returned 0x0
	[0187.108] WbemLocator:IUnknown:QueryInterface (in: This=0x785cf0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f02c | out: ppvObject=0x19f02c*=0x57b0ad4) returned 0x0
	[0187.108] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b0ad4, pProxy=0x785cf0, pAuthnSvc=0x19f07c, pAuthzSvc=0x19f078, pServerPrincName=0x19f070, pAuthnLevel=0x19f074, pImpLevel=0x19f064, pAuthInfo=0x19f068, pCapabilites=0x19f06c | out: pAuthnSvc=0x19f07c*=0xa, pAuthzSvc=0x19f078*=0x0, pServerPrincName=0x19f070, pAuthnLevel=0x19f074*=0x6, pImpLevel=0x19f064*=0x2, pAuthInfo=0x19f068, pCapabilites=0x19f06c*=0x1) returned 0x0
	[0187.109] WbemLocator:IUnknown:Release (This=0x57b0ad4) returned 0x1
	[0187.109] WbemLocator:IUnknown:QueryInterface (in: This=0x785cf0, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f020 | out: ppvObject=0x19f020*=0x57b0af8) returned 0x0
	[0187.109] WbemLocator:IUnknown:QueryInterface (in: This=0x785cf0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f01c | out: ppvObject=0x19f01c*=0x57b0ad4) returned 0x0
	[0187.109] WbemLocator:IClientSecurity:SetBlanket (This=0x57b0ad4, pProxy=0x785cf0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0187.109] WbemLocator:IUnknown:Release (This=0x57b0ad4) returned 0x2
	[0187.109] WbemLocator:IUnknown:Release (This=0x57b0af8) returned 0x1
	[0187.109] CoTaskMemFree (pv=0x57b7e10) 
	[0187.109] WbemLocator:IUnknown:Release (This=0x57a2e18) returned 0x0
	[0187.109] WbemLocator:IUnknown:QueryInterface (in: This=0x785cf0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x57b0af8) returned 0x0
	[0187.109] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebd8 | out: ppvObject=0x19ebd8*=0x0) returned 0x80004002
	[0187.111] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9f4 | out: ppvObject=0x19e9f4*=0x0) returned 0x80004002
	[0187.112] WbemLocator:IUnknown:QueryInterface (in: This=0x785cf0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7cc | out: ppvObject=0x19e7cc*=0x0) returned 0x80004002
	[0187.113] WbemLocator:IUnknown:AddRef (This=0x57b0af8) returned 0x3
	[0187.113] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0187.114] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4e4 | out: ppvObject=0x19e4e4*=0x0) returned 0x80004002
	[0187.114] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4f0 | out: ppvObject=0x19e4f0*=0x57b0a54) returned 0x0
	[0187.114] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0a54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4f8 | out: pCid=0x19e4f8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0187.114] WbemLocator:IUnknown:Release (This=0x57b0a54) returned 0x3
	[0187.114] CoGetContextToken (in: pToken=0x19e550 | out: pToken=0x19e550) returned 0x0
	[0187.114] CoGetContextToken (in: pToken=0x19e958 | out: pToken=0x19e958) returned 0x0
	[0187.114] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9e8 | out: ppvObject=0x19e9e8*=0x57b0adc) returned 0x0
	[0187.114] WbemLocator:IRpcOptions:Query (in: This=0x57b0adc, pPrx=0x57b0af8, dwProperty=2, pdwValue=0x19ea10 | out: pdwValue=0x19ea10) returned 0x80004002
	[0187.114] WbemLocator:IUnknown:Release (This=0x57b0adc) returned 0x3
	[0187.114] WbemLocator:IUnknown:Release (This=0x57b0af8) returned 0x2
	[0187.114] CoGetContextToken (in: pToken=0x19ef30 | out: pToken=0x19ef30) returned 0x0
	[0187.114] CoGetContextToken (in: pToken=0x19ee90 | out: pToken=0x19ee90) returned 0x0
	[0187.114] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x19ef60*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef5c | out: ppvObject=0x19ef5c*=0x785cf0) returned 0x0
	[0187.114] WbemLocator:IUnknown:AddRef (This=0x785cf0) returned 0x4
	[0187.114] WbemLocator:IUnknown:Release (This=0x785cf0) returned 0x3
	[0187.115] WbemLocator:IUnknown:Release (This=0x785cf0) returned 0x2
	[0187.115] SysStringLen (param_1=0x0) returned 0x0
	[0187.115] CoGetContextToken (in: pToken=0x19ef38 | out: pToken=0x19ef38) returned 0x0
	[0187.115] WbemLocator:IUnknown:AddRef (This=0x57b0af8) returned 0x3
	[0187.115] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0af8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edcc | out: ppvObject=0x19edcc*=0x57b0af8) returned 0x0
	[0187.115] WbemLocator:IUnknown:Release (This=0x57b0af8) returned 0x3
	[0187.115] WbemLocator:IUnknown:Release (This=0x57b0af8) returned 0x2
	[0187.115] CoGetContextToken (in: pToken=0x19f030 | out: pToken=0x19f030) returned 0x0
	[0187.115] WbemLocator:IUnknown:AddRef (This=0x785cf0) returned 0x3
	[0187.115] IWbemServices:ExecQuery (in: This=0x785cf0, strQueryLanguage="WQL", strQuery="SELECT * FROM FirewallProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f240 | out: ppEnum=0x19f240*=0x78a330) returned 0x0
	[0187.128] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x78a334) returned 0x0
	[0187.167] IClientSecurity:QueryBlanket (in: This=0x78a334, pProxy=0x78a330, pAuthnSvc=0x19f0f4, pAuthzSvc=0x19f0f0, pServerPrincName=0x19f0e8, pAuthnLevel=0x19f0ec, pImpLevel=0x19f0dc, pAuthInfo=0x19f0e0, pCapabilites=0x19f0e4 | out: pAuthnSvc=0x19f0f4*=0xa, pAuthzSvc=0x19f0f0*=0x0, pServerPrincName=0x19f0e8, pAuthnLevel=0x19f0ec*=0x6, pImpLevel=0x19f0dc*=0x2, pAuthInfo=0x19f0e0, pCapabilites=0x19f0e4*=0x1) returned 0x0
	[0187.167] IUnknown:Release (This=0x78a334) returned 0x1
	[0187.167] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f098 | out: ppvObject=0x19f098*=0x57b08f8) returned 0x0
	[0187.167] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f094 | out: ppvObject=0x19f094*=0x78a334) returned 0x0
	[0187.167] IClientSecurity:SetBlanket (This=0x78a334, pProxy=0x78a330, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0187.169] IUnknown:Release (This=0x78a334) returned 0x2
	[0187.169] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x1
	[0187.169] CoTaskMemFree (pv=0x57b7ea0) 
	[0187.169] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec90 | out: ppvObject=0x19ec90*=0x57b08f8) returned 0x0
	[0187.170] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec4c | out: ppvObject=0x19ec4c*=0x0) returned 0x80004002
	[0187.170] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x0) returned 0x80004002
	[0187.170] IUnknown:QueryInterface (in: This=0x78a330, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0187.171] WbemLocator:IUnknown:AddRef (This=0x57b08f8) returned 0x3
	[0187.171] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0187.171] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0187.171] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x57b0854) returned 0x0
	[0187.171] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0854, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e570 | out: pCid=0x19e570*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0187.171] WbemLocator:IUnknown:Release (This=0x57b0854) returned 0x3
	[0187.171] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0187.171] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0187.171] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x57b08dc) returned 0x0
	[0187.172] WbemLocator:IRpcOptions:Query (in: This=0x57b08dc, pPrx=0x57b08f8, dwProperty=2, pdwValue=0x19ea88 | out: pdwValue=0x19ea88) returned 0x80004002
	[0187.172] WbemLocator:IUnknown:Release (This=0x57b08dc) returned 0x3
	[0187.172] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x2
	[0187.172] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0187.172] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0187.172] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x19efd0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efcc | out: ppvObject=0x19efcc*=0x78a330) returned 0x0
	[0187.172] IUnknown:AddRef (This=0x78a330) returned 0x4
	[0187.172] IUnknown:Release (This=0x78a330) returned 0x3
	[0187.172] IUnknown:Release (This=0x78a330) returned 0x2
	[0187.172] WbemLocator:IUnknown:Release (This=0x785cf0) returned 0x2
	[0187.172] SysStringLen (param_1=0x0) returned 0x0
	[0187.172] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x57acad8, puCount=0x19f28c | out: puCount=0x19f28c*=0x2) returned 0x0
	[0187.172] WbemDefPath:IWbemPath:GetText (in: This=0x57acad8, lFlags=4, puBuffLength=0x19f288*=0x0, pszText=0x0 | out: puBuffLength=0x19f288*=0x18, pszText=0x0) returned 0x0
	[0187.172] WbemDefPath:IWbemPath:GetText (in: This=0x57acad8, lFlags=4, puBuffLength=0x19f288*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f288*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0187.173] CoGetContextToken (in: pToken=0x19f0d8 | out: pToken=0x19f0d8) returned 0x0
	[0187.173] IUnknown:AddRef (This=0x78a330) returned 0x3
	[0187.173] IEnumWbemClassObject:Clone (in: This=0x78a330, ppEnum=0x19f298 | out: ppEnum=0x19f298*=0x78b140) returned 0x0
	[0187.174] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f15c | out: ppvObject=0x19f15c*=0x78b144) returned 0x0
	[0187.174] IClientSecurity:QueryBlanket (in: This=0x78b144, pProxy=0x78b140, pAuthnSvc=0x19f1ac, pAuthzSvc=0x19f1a8, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4, pImpLevel=0x19f194, pAuthInfo=0x19f198, pCapabilites=0x19f19c | out: pAuthnSvc=0x19f1ac*=0xa, pAuthzSvc=0x19f1a8*=0x0, pServerPrincName=0x19f1a0, pAuthnLevel=0x19f1a4*=0x6, pImpLevel=0x19f194*=0x2, pAuthInfo=0x19f198, pCapabilites=0x19f19c*=0x1) returned 0x0
	[0187.174] IUnknown:Release (This=0x78b144) returned 0x1
	[0187.174] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f150 | out: ppvObject=0x19f150*=0x57b1cf8) returned 0x0
	[0187.174] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f14c | out: ppvObject=0x19f14c*=0x78b144) returned 0x0
	[0187.175] IClientSecurity:SetBlanket (This=0x78b144, pProxy=0x78b140, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0187.176] IUnknown:Release (This=0x78b144) returned 0x2
	[0187.176] WbemLocator:IUnknown:Release (This=0x57b1cf8) returned 0x1
	[0187.176] CoTaskMemFree (pv=0x57b7bd0) 
	[0187.177] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed38 | out: ppvObject=0x19ed38*=0x57b1cf8) returned 0x0
	[0187.177] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecf4 | out: ppvObject=0x19ecf4*=0x0) returned 0x80004002
	[0187.179] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb14 | out: ppvObject=0x19eb14*=0x0) returned 0x80004002
	[0187.180] IUnknown:QueryInterface (in: This=0x78b140, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8ec | out: ppvObject=0x19e8ec*=0x0) returned 0x80004002
	[0187.181] WbemLocator:IUnknown:AddRef (This=0x57b1cf8) returned 0x3
	[0187.181] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0187.181] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e604 | out: ppvObject=0x19e604*=0x0) returned 0x80004002
	[0187.181] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e610 | out: ppvObject=0x19e610*=0x57b1c54) returned 0x0
	[0187.181] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1c54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e618 | out: pCid=0x19e618*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0187.181] WbemLocator:IUnknown:Release (This=0x57b1c54) returned 0x3
	[0187.181] CoGetContextToken (in: pToken=0x19e670 | out: pToken=0x19e670) returned 0x0
	[0187.181] CoGetContextToken (in: pToken=0x19ea78 | out: pToken=0x19ea78) returned 0x0
	[0187.182] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb08 | out: ppvObject=0x19eb08*=0x57b1cdc) returned 0x0
	[0187.182] WbemLocator:IRpcOptions:Query (in: This=0x57b1cdc, pPrx=0x57b1cf8, dwProperty=2, pdwValue=0x19eb30 | out: pdwValue=0x19eb30) returned 0x80004002
	[0187.182] WbemLocator:IUnknown:Release (This=0x57b1cdc) returned 0x3
	[0187.182] WbemLocator:IUnknown:Release (This=0x57b1cf8) returned 0x2
	[0187.182] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0187.182] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0187.182] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x19f078*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x78b140) returned 0x0
	[0187.182] IUnknown:AddRef (This=0x78b140) returned 0x4
	[0187.182] IUnknown:Release (This=0x78b140) returned 0x3
	[0187.183] IUnknown:Release (This=0x78b140) returned 0x2
	[0187.183] IUnknown:Release (This=0x78a330) returned 0x2
	[0187.183] SysStringLen (param_1=0x0) returned 0x0
	[0187.183] IEnumWbemClassObject:Reset (This=0x78b140) returned 0x0
	[0187.184] CoTaskMemAlloc (cb=0x4) returned 0x57a2f78
	[0187.184] IEnumWbemClassObject:Next (in: This=0x78b140, lTimeout=-1, uCount=0x1, apObjects=0x57a2f78, puReturned=0x28ad048 | out: apObjects=0x57a2f78*=0x0, puReturned=0x28ad048*=0x0) returned 0x1
	[0187.190] CoTaskMemFree (pv=0x57a2f78) 
	[0187.191] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0187.191] WbemLocator:IUnknown:Release (This=0x57b1cf8) returned 0x1
	[0187.191] IUnknown:Release (This=0x78b140) returned 0x0
	[0187.195] CoGetContextToken (in: pToken=0x19f1c0 | out: pToken=0x19f1c0) returned 0x0
	[0187.195] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x1
	[0187.195] IUnknown:Release (This=0x78a330) returned 0x0
	[0187.255] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2b4 | out: phkResult=0x19f2b4*=0x0) returned 0x2
	[0187.288] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.288] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.290] CoTaskMemFree (pv=0x78eb70) 
	[0187.290] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.291] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", nBufferLength=0x105, lpBuffer=0x19ee18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", lpFilePart=0x0) returned 0x2c
	[0187.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1
	[0187.291] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", nBufferLength=0x105, lpBuffer=0x19edd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", lpFilePart=0x0) returned 0x2c
	[0187.291] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory\\", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory\\", lpFilePart=0x0) returned 0x2d
	[0187.291] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory\\*.wallet", lpFindFileData=0x19eff4 | out: lpFindFileData=0x19eff4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f290) returned 1
	[0187.302] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.302] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.302] CoTaskMemFree (pv=0x78eb70) 
	[0187.302] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.302] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic", nBufferLength=0x105, lpBuffer=0x19ee18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic", lpFilePart=0x0) returned 0x2c
	[0187.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1
	[0187.302] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic", nBufferLength=0x105, lpBuffer=0x19edd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic", lpFilePart=0x0) returned 0x2c
	[0187.302] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic\\", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic\\", lpFilePart=0x0) returned 0x2d
	[0187.303] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic\\*", lpFindFileData=0x19eff4 | out: lpFindFileData=0x19eff4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f290) returned 1
	[0187.306] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.306] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.307] CoTaskMemFree (pv=0x78eb70) 
	[0187.307] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.307] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi", nBufferLength=0x105, lpBuffer=0x19ee18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi", lpFilePart=0x0) returned 0x2d
	[0187.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1
	[0187.307] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi", nBufferLength=0x105, lpBuffer=0x19edd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi", lpFilePart=0x0) returned 0x2d
	[0187.307] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi\\", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi\\", lpFilePart=0x0) returned 0x2e
	[0187.307] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi\\*", lpFindFileData=0x19eff4 | out: lpFindFileData=0x19eff4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f290) returned 1
	[0187.318] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.318] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.318] CoTaskMemFree (pv=0x78eb70) 
	[0187.319] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.319] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", nBufferLength=0x105, lpBuffer=0x19ee18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", lpFilePart=0x0) returned 0x36
	[0187.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1
	[0187.319] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", nBufferLength=0x105, lpBuffer=0x19edd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", lpFilePart=0x0) returned 0x36
	[0187.319] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets\\", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets\\", lpFilePart=0x0) returned 0x37
	[0187.320] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets\\*", lpFindFileData=0x19eff4 | out: lpFindFileData=0x19eff4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f290) returned 1
	[0187.330] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.331] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.331] CoTaskMemFree (pv=0x78eb70) 
	[0187.331] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.331] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets", nBufferLength=0x105, lpBuffer=0x19ee18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets", lpFilePart=0x0) returned 0x36
	[0187.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1
	[0187.331] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets", nBufferLength=0x105, lpBuffer=0x19edd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets", lpFilePart=0x0) returned 0x36
	[0187.331] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets\\", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets\\", lpFilePart=0x0) returned 0x37
	[0187.331] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets\\*", lpFindFileData=0x19eff4 | out: lpFindFileData=0x19eff4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f290) returned 1
	[0187.337] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.337] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.337] CoTaskMemFree (pv=0x78eb70) 
	[0187.337] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.338] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.338] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.338] CoTaskMemFree (pv=0x78eb70) 
	[0187.338] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.338] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus", nBufferLength=0x105, lpBuffer=0x19ee18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus", lpFilePart=0x0) returned 0x2c
	[0187.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1
	[0187.338] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus", nBufferLength=0x105, lpBuffer=0x19edd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus", lpFilePart=0x0) returned 0x2c
	[0187.338] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\", lpFilePart=0x0) returned 0x2d
	[0187.338] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\*.json", lpFindFileData=0x19eff4 | out: lpFindFileData=0x19eff4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f290) returned 1
	[0187.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", nBufferLength=0x105, lpBuffer=0x19ee18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", lpFilePart=0x0) returned 0x3a
	[0187.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1
	[0187.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", nBufferLength=0x105, lpBuffer=0x19edd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", lpFilePart=0x0) returned 0x3a
	[0187.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet\\", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet\\", lpFilePart=0x0) returned 0x3b
	[0187.340] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet\\*", lpFindFileData=0x19eff4 | out: lpFindFileData=0x19eff4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f290) returned 1
	[0187.344] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.344] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.344] CoTaskMemFree (pv=0x78eb70) 
	[0187.344] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.344] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda", nBufferLength=0x105, lpBuffer=0x19ee18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda", lpFilePart=0x0) returned 0x2c
	[0187.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1
	[0187.344] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda", nBufferLength=0x105, lpBuffer=0x19edd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda", lpFilePart=0x0) returned 0x2c
	[0187.345] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda\\", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda\\", lpFilePart=0x0) returned 0x2d
	[0187.345] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda\\*", lpFindFileData=0x19eff4 | out: lpFindFileData=0x19eff4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f290) returned 1
	[0187.348] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.348] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.348] CoTaskMemFree (pv=0x78eb70) 
	[0187.348] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.348] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx", nBufferLength=0x105, lpBuffer=0x19ee18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx", lpFilePart=0x0) returned 0x36
	[0187.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1
	[0187.348] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx", nBufferLength=0x105, lpBuffer=0x19edd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx", lpFilePart=0x0) returned 0x36
	[0187.348] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx\\", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx\\", lpFilePart=0x0) returned 0x37
	[0187.349] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx\\*", lpFindFileData=0x19eff4 | out: lpFindFileData=0x19eff4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f290) returned 1
	[0187.357] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.357] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0187.358] CoTaskMemFree (pv=0x78eb70) 
	[0187.358] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1fc) returned 1
	[0187.366] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0187.366] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x19ecd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x26
	[0187.366] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\*", lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf9246cfb, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xf9246cfb, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797340
	[0187.366] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf9246cfb, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xf9246cfb, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.367] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaadbe10, ftCreationTime.dwHighDateTime=0x1d7ae84, ftLastAccessTime.dwLowDateTime=0x2ac7e650, ftLastAccessTime.dwHighDateTime=0x1d7aee0, ftLastWriteTime.dwLowDateTime=0x2ac7e650, ftLastWriteTime.dwHighDateTime=0x1d7aee0, nFileSizeHigh=0x0, nFileSizeLow=0xd10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="0kOz_48.jpg", cAlternateFileName="")) returned 1
	[0187.367] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93163ac0, ftCreationTime.dwHighDateTime=0x1d7ae60, ftLastAccessTime.dwLowDateTime=0xcfb04d10, ftLastAccessTime.dwHighDateTime=0x1d7aef4, ftLastWriteTime.dwLowDateTime=0xcfb04d10, ftLastWriteTime.dwHighDateTime=0x1d7aef4, nFileSizeHigh=0x0, nFileSizeLow=0x171b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="1piDCTncAl27dK.bmp", cAlternateFileName="1PIDCT~1.BMP")) returned 1
	[0187.367] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fa51f60, ftCreationTime.dwHighDateTime=0x1d7a68a, ftLastAccessTime.dwLowDateTime=0x129cd250, ftLastAccessTime.dwHighDateTime=0x1d7ada7, ftLastWriteTime.dwLowDateTime=0x129cd250, ftLastWriteTime.dwHighDateTime=0x1d7ada7, nFileSizeHigh=0x0, nFileSizeLow=0x1567e, dwReserved0=0x0, dwReserved1=0x0, cFileName="22MG5TSZ.wav", cAlternateFileName="")) returned 1
	[0187.367] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32c094f0, ftCreationTime.dwHighDateTime=0x1d7ad5b, ftLastAccessTime.dwLowDateTime=0xec972ce0, ftLastAccessTime.dwHighDateTime=0x1d7ade7, ftLastWriteTime.dwLowDateTime=0xec972ce0, ftLastWriteTime.dwHighDateTime=0x1d7ade7, nFileSizeHigh=0x0, nFileSizeLow=0x13f31, dwReserved0=0x0, dwReserved1=0x0, cFileName="2lXUyts.avi", cAlternateFileName="")) returned 1
	[0187.367] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73230dc0, ftCreationTime.dwHighDateTime=0x1d79ff5, ftLastAccessTime.dwLowDateTime=0xdc3534c0, ftLastAccessTime.dwHighDateTime=0x1d7a8f4, ftLastWriteTime.dwLowDateTime=0xdc3534c0, ftLastWriteTime.dwHighDateTime=0x1d7a8f4, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="34Y 3.m4a", cAlternateFileName="34Y3~1.M4A")) returned 1
	[0187.367] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0187.368] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a7810, ftCreationTime.dwHighDateTime=0x1d7a537, ftLastAccessTime.dwLowDateTime=0xc23afc30, ftLastAccessTime.dwHighDateTime=0x1d7adf4, ftLastWriteTime.dwLowDateTime=0xc23afc30, ftLastWriteTime.dwHighDateTime=0x1d7adf4, nFileSizeHigh=0x0, nFileSizeLow=0x13263, dwReserved0=0x0, dwReserved1=0x0, cFileName="bqwjCpB2GXA5llIkBh.m4a", cAlternateFileName="BQWJCP~1.M4A")) returned 1
	[0187.368] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc722b70, ftCreationTime.dwHighDateTime=0x1d7a6b1, ftLastAccessTime.dwLowDateTime=0x7f821b90, ftLastAccessTime.dwHighDateTime=0x1d7aad8, ftLastWriteTime.dwLowDateTime=0x7f821b90, ftLastWriteTime.dwHighDateTime=0x1d7aad8, nFileSizeHigh=0x0, nFileSizeLow=0xc9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="caVk_9NRZCYnVBDwoN-.m4a", cAlternateFileName="CAVK_9~1.M4A")) returned 1
	[0187.368] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95764830, ftCreationTime.dwHighDateTime=0x1d7a9e9, ftLastAccessTime.dwLowDateTime=0x9093cf90, ftLastAccessTime.dwHighDateTime=0x1d7aa84, ftLastWriteTime.dwLowDateTime=0x9093cf90, ftLastWriteTime.dwHighDateTime=0x1d7aa84, nFileSizeHigh=0x0, nFileSizeLow=0x24bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="dsN9lF.wav", cAlternateFileName="")) returned 1
	[0187.368] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25adbe60, ftCreationTime.dwHighDateTime=0x1d7a1f2, ftLastAccessTime.dwLowDateTime=0x27ed65a0, ftLastAccessTime.dwHighDateTime=0x1d7a499, ftLastWriteTime.dwLowDateTime=0x27ed65a0, ftLastWriteTime.dwHighDateTime=0x1d7a499, nFileSizeHigh=0x0, nFileSizeLow=0x58f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="f89_9u.png", cAlternateFileName="")) returned 1
	[0187.369] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfeeea80, ftCreationTime.dwHighDateTime=0x1d7a498, ftLastAccessTime.dwLowDateTime=0x34531900, ftLastAccessTime.dwHighDateTime=0x1d7ab30, ftLastWriteTime.dwLowDateTime=0x34531900, ftLastWriteTime.dwHighDateTime=0x1d7ab30, nFileSizeHigh=0x0, nFileSizeLow=0x3c47, dwReserved0=0x0, dwReserved1=0x0, cFileName="gHPi_Kas.mkv", cAlternateFileName="")) returned 1
	[0187.369] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d6be30, ftCreationTime.dwHighDateTime=0x1d7ae13, ftLastAccessTime.dwLowDateTime=0xa2afcb60, ftLastAccessTime.dwHighDateTime=0x1d7af85, ftLastWriteTime.dwLowDateTime=0xa2afcb60, ftLastWriteTime.dwHighDateTime=0x1d7af85, nFileSizeHigh=0x0, nFileSizeLow=0xa5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoYdtDiA.odp", cAlternateFileName="")) returned 1
	[0187.369] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79fec290, ftCreationTime.dwHighDateTime=0x1d7aac4, ftLastAccessTime.dwLowDateTime=0x79faf6f0, ftLastAccessTime.dwHighDateTime=0x1d7b033, ftLastWriteTime.dwLowDateTime=0x79faf6f0, ftLastWriteTime.dwHighDateTime=0x1d7b033, nFileSizeHigh=0x0, nFileSizeLow=0x8853, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEEaTiumJ3dXJGQZ7n6b.swf", cAlternateFileName="IEEATI~1.SWF")) returned 1
	[0187.369] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ecccc0, ftCreationTime.dwHighDateTime=0x1d7aab5, ftLastAccessTime.dwLowDateTime=0x7be25b30, ftLastAccessTime.dwHighDateTime=0x1d7ad2b, ftLastWriteTime.dwLowDateTime=0x7be25b30, ftLastWriteTime.dwHighDateTime=0x1d7ad2b, nFileSizeHigh=0x0, nFileSizeLow=0xce7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="j80vgQlB7_TCjbOF9.xls", cAlternateFileName="J80VGQ~1.XLS")) returned 1
	[0187.369] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8b29560, ftCreationTime.dwHighDateTime=0x1d7aad6, ftLastAccessTime.dwLowDateTime=0xa0aaa1d0, ftLastAccessTime.dwHighDateTime=0x1d7af5f, ftLastWriteTime.dwLowDateTime=0xa0aaa1d0, ftLastWriteTime.dwHighDateTime=0x1d7af5f, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x0, dwReserved1=0x0, cFileName="lGZ9yzMWN.flv", cAlternateFileName="LGZ9YZ~1.FLV")) returned 1
	[0187.369] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f48e0, ftCreationTime.dwHighDateTime=0x1d7aa43, ftLastAccessTime.dwLowDateTime=0xb8594df0, ftLastAccessTime.dwHighDateTime=0x1d7ab76, ftLastWriteTime.dwLowDateTime=0xb8594df0, ftLastWriteTime.dwHighDateTime=0x1d7ab76, nFileSizeHigh=0x0, nFileSizeLow=0x14018, dwReserved0=0x0, dwReserved1=0x0, cFileName="L_jKW.png", cAlternateFileName="")) returned 1
	[0187.369] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacb4a9e0, ftCreationTime.dwHighDateTime=0x1d7a64e, ftLastAccessTime.dwLowDateTime=0xef4f1ae0, ftLastAccessTime.dwHighDateTime=0x1d7ac7c, ftLastWriteTime.dwLowDateTime=0xef4f1ae0, ftLastWriteTime.dwHighDateTime=0x1d7ac7c, nFileSizeHigh=0x0, nFileSizeLow=0x11f35, dwReserved0=0x0, dwReserved1=0x0, cFileName="M4SYsHvu.wav", cAlternateFileName="")) returned 1
	[0187.370] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa92f1c4e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa92f1c4e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0187.370] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb18924b0, ftCreationTime.dwHighDateTime=0x1d7ad46, ftLastAccessTime.dwLowDateTime=0x77a65640, ftLastAccessTime.dwHighDateTime=0x1d7af3b, ftLastWriteTime.dwLowDateTime=0x77a65640, ftLastWriteTime.dwHighDateTime=0x1d7af3b, nFileSizeHigh=0x0, nFileSizeLow=0x13f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mOPn72YIj6YH.odt", cAlternateFileName="MOPN72~1.ODT")) returned 1
	[0187.370] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60bb2f60, ftCreationTime.dwHighDateTime=0x1d7b03e, ftLastAccessTime.dwLowDateTime=0x91c596c0, ftLastAccessTime.dwHighDateTime=0x1d7b040, ftLastWriteTime.dwLowDateTime=0x91c596c0, ftLastWriteTime.dwHighDateTime=0x1d7b040, nFileSizeHigh=0x0, nFileSizeLow=0x3a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MYH-5Jo-o2wNLjFibbE.m4a", cAlternateFileName="MYH-5J~1.M4A")) returned 1
	[0187.370] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1ba6400, ftCreationTime.dwHighDateTime=0x1d7ac05, ftLastAccessTime.dwLowDateTime=0x689d1000, ftLastAccessTime.dwHighDateTime=0x1d7ae1c, ftLastWriteTime.dwLowDateTime=0x689d1000, ftLastWriteTime.dwHighDateTime=0x1d7ae1c, nFileSizeHigh=0x0, nFileSizeLow=0xa00d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NWVFDLfWDWbZwtH2.wav", cAlternateFileName="NWVFDL~1.WAV")) returned 1
	[0187.371] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28eb0a0, ftCreationTime.dwHighDateTime=0x1d7a5d4, ftLastAccessTime.dwLowDateTime=0x5da115a0, ftLastAccessTime.dwHighDateTime=0x1d7aa81, ftLastWriteTime.dwLowDateTime=0x5da115a0, ftLastWriteTime.dwHighDateTime=0x1d7aa81, nFileSizeHigh=0x0, nFileSizeLow=0xa54d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OXuqvLaEuJlE.swf", cAlternateFileName="OXUQVL~1.SWF")) returned 1
	[0187.371] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ae8ac0, ftCreationTime.dwHighDateTime=0x1d7ab30, ftLastAccessTime.dwLowDateTime=0xa32332b0, ftLastAccessTime.dwHighDateTime=0x1d7abcc, ftLastWriteTime.dwLowDateTime=0xa32332b0, ftLastWriteTime.dwHighDateTime=0x1d7abcc, nFileSizeHigh=0x0, nFileSizeLow=0x14784, dwReserved0=0x0, dwReserved1=0x0, cFileName="qf wlIedyy 9.mkv", cAlternateFileName="QFWLIE~1.MKV")) returned 1
	[0187.371] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa294a4b0, ftCreationTime.dwHighDateTime=0x1d7a2c0, ftLastAccessTime.dwLowDateTime=0x7e7ddd40, ftLastAccessTime.dwHighDateTime=0x1d7b002, ftLastWriteTime.dwLowDateTime=0x7e7ddd40, ftLastWriteTime.dwHighDateTime=0x1d7b002, nFileSizeHigh=0x0, nFileSizeLow=0xe2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="R3cx0U.doc", cAlternateFileName="")) returned 1
	[0187.371] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c372f0, ftCreationTime.dwHighDateTime=0x1d7a705, ftLastAccessTime.dwLowDateTime=0x69f791f0, ftLastAccessTime.dwHighDateTime=0x1d7a971, ftLastWriteTime.dwLowDateTime=0x69f791f0, ftLastWriteTime.dwHighDateTime=0x1d7a971, nFileSizeHigh=0x0, nFileSizeLow=0x8d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7HTEENJB4iakyXnBJ-c.ots", cAlternateFileName="R7HTEE~1.OTS")) returned 1
	[0187.371] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea6a60, ftCreationTime.dwHighDateTime=0x1d7ae05, ftLastAccessTime.dwLowDateTime=0xecea2000, ftLastAccessTime.dwHighDateTime=0x1d7af75, ftLastWriteTime.dwLowDateTime=0xecea2000, ftLastWriteTime.dwHighDateTime=0x1d7af75, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="rLXh0af_JDtRNbDr.flv", cAlternateFileName="RLXH0A~1.FLV")) returned 1
	[0187.372] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa723a6f0, ftCreationTime.dwHighDateTime=0x1d7a1f5, ftLastAccessTime.dwLowDateTime=0x7dd4a260, ftLastAccessTime.dwHighDateTime=0x1d7afa9, ftLastWriteTime.dwLowDateTime=0x7dd4a260, ftLastWriteTime.dwHighDateTime=0x1d7afa9, nFileSizeHigh=0x0, nFileSizeLow=0x16dd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="s7_NT7M.docx", cAlternateFileName="S7_NT7~1.DOC")) returned 1
	[0187.372] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac2f050, ftCreationTime.dwHighDateTime=0x1d7ad24, ftLastAccessTime.dwLowDateTime=0x69c33790, ftLastAccessTime.dwHighDateTime=0x1d7adbb, ftLastWriteTime.dwLowDateTime=0x69c33790, ftLastWriteTime.dwHighDateTime=0x1d7adbb, nFileSizeHigh=0x0, nFileSizeLow=0x775d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SX-Wra.png", cAlternateFileName="")) returned 1
	[0187.372] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3175d600, ftCreationTime.dwHighDateTime=0x1d7ad1a, ftLastAccessTime.dwLowDateTime=0xd75c3c40, ftLastAccessTime.dwHighDateTime=0x1d7afd5, ftLastWriteTime.dwLowDateTime=0xd75c3c40, ftLastWriteTime.dwHighDateTime=0x1d7afd5, nFileSizeHigh=0x0, nFileSizeLow=0x27fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="vaXZyRP.png", cAlternateFileName="")) returned 1
	[0187.372] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3175d600, ftCreationTime.dwHighDateTime=0x1d7ad1a, ftLastAccessTime.dwLowDateTime=0xd75c3c40, ftLastAccessTime.dwHighDateTime=0x1d7afd5, ftLastWriteTime.dwLowDateTime=0xd75c3c40, ftLastWriteTime.dwHighDateTime=0x1d7afd5, nFileSizeHigh=0x0, nFileSizeLow=0x27fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="vaXZyRP.png", cAlternateFileName="")) returned 0
	[0187.372] FindClose (in: hFindFile=0x5797340 | out: hFindFile=0x5797340) returned 1
	[0187.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1bc) returned 1
	[0187.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c8) returned 1
	[0187.373] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b
	[0187.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ec) returned 1
	[0187.373] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b
	[0187.373] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x2c
	[0187.373] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x19ef14 | out: lpFindFileData=0x19ef14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797a80
	[0187.374] FindNextFileW (in: hFindFile=0x5797a80, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.375] FindNextFileW (in: hFindFile=0x5797a80, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0187.375] FindNextFileW (in: hFindFile=0x5797a80, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0
	[0187.375] FindClose (in: hFindFile=0x5797a80 | out: hFindFile=0x5797a80) returned 1
	[0187.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1ac) returned 1
	[0187.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1b8) returned 1
	[0187.375] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\.", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b
	[0187.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f168) returned 1
	[0187.375] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x19ec70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b
	[0187.375] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x19ec44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x2c
	[0187.375] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797500
	[0187.376] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.376] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0187.376] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.376] FindClose (in: hFindFile=0x5797500 | out: hFindFile=0x5797500) returned 1
	[0187.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0187.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f134) returned 1
	[0187.376] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x38
	[0187.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.376] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x38
	[0187.376] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x39
	[0187.377] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797980
	[0187.377] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.377] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1
	[0187.377] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0
	[0187.377] FindClose (in: hFindFile=0x5797980 | out: hFindFile=0x5797980) returned 1
	[0187.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.378] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x38
	[0187.378] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f
	[0187.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ec) returned 1
	[0187.378] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f
	[0187.378] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x30
	[0187.378] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x19ef14 | out: lpFindFileData=0x19ef14*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797980
	[0187.378] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.379] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1
	[0187.379] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e898ff, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1
	[0187.379] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0187.379] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x816a7a21, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1
	[0187.379] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1
	[0187.379] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0187.380] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1
	[0187.380] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0187.380] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0187.380] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0187.380] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0187.380] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling", cAlternateFileName="")) returned 1
	[0187.381] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0187.381] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4984c62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4984c62, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0187.381] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0187.381] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0187.381] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1
	[0187.381] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0
	[0187.381] FindClose (in: hFindFile=0x5797980 | out: hFindFile=0x5797980) returned 1
	[0187.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1ac) returned 1
	[0187.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1b8) returned 1
	[0187.382] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\.", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f
	[0187.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f168) returned 1
	[0187.382] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ec70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f
	[0187.382] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x19ec44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x30
	[0187.382] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797880
	[0187.382] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.382] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1
	[0187.382] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e898ff, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1
	[0187.383] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0187.383] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x816a7a21, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1
	[0187.383] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1
	[0187.383] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0187.383] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1
	[0187.383] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0187.383] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0187.384] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0187.384] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0187.384] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling", cAlternateFileName="")) returned 1
	[0187.384] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0187.384] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4984c62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4984c62, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0187.385] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0187.385] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0187.385] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1
	[0187.385] FindNextFileW (in: hFindFile=0x5797880, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.385] FindClose (in: hFindFile=0x5797880 | out: hFindFile=0x5797880) returned 1
	[0187.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0187.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f134) returned 1
	[0187.385] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x36
	[0187.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.385] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x36
	[0187.385] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x37
	[0187.386] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797680
	[0187.386] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.386] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0187.386] FindClose (in: hFindFile=0x5797680 | out: hFindFile=0x5797680) returned 1
	[0187.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.386] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x36
	[0187.386] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x3c
	[0187.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.387] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x3c
	[0187.387] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\", lpFilePart=0x0) returned 0x3d
	[0187.387] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797840
	[0187.387] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.387] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1
	[0187.388] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0
	[0187.388] FindClose (in: hFindFile=0x5797840 | out: hFindFile=0x5797840) returned 1
	[0187.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.388] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x3c
	[0187.388] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x3b
	[0187.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.388] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x3b
	[0187.388] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x3c
	[0187.388] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797740
	[0187.389] FindNextFileW (in: hFindFile=0x5797740, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.389] FindNextFileW (in: hFindFile=0x5797740, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0187.389] FindClose (in: hFindFile=0x5797740 | out: hFindFile=0x5797740) returned 1
	[0187.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.389] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x3b
	[0187.389] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x48
	[0187.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.389] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x48
	[0187.389] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x49
	[0187.390] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797800
	[0187.391] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.391] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0187.391] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0187.391] FindClose (in: hFindFile=0x5797800 | out: hFindFile=0x5797800) returned 1
	[0187.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.391] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x48
	[0187.391] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x35
	[0187.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.391] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x35
	[0187.391] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x36
	[0187.392] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797980
	[0187.392] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.392] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1
	[0187.392] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0
	[0187.392] FindClose (in: hFindFile=0x5797980 | out: hFindFile=0x5797980) returned 1
	[0187.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.393] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x35
	[0187.393] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x41
	[0187.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.393] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x41
	[0187.393] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x42
	[0187.393] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797680
	[0187.394] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.394] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6654de95, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x6654de95, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
	[0187.394] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1
	[0187.394] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 0
	[0187.394] FindClose (in: hFindFile=0x5797680 | out: hFindFile=0x5797680) returned 1
	[0187.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.394] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x41
	[0187.395] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x33
	[0187.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.395] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x33
	[0187.395] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x34
	[0187.395] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797680
	[0187.396] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.396] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0187.396] FindClose (in: hFindFile=0x5797680 | out: hFindFile=0x5797680) returned 1
	[0187.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.397] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x33
	[0187.397] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x37
	[0187.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.397] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x37
	[0187.397] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x38
	[0187.397] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797980
	[0187.403] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.404] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0187.404] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0
	[0187.404] FindClose (in: hFindFile=0x5797980 | out: hFindFile=0x5797980) returned 1
	[0187.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.405] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x37
	[0187.405] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x36
	[0187.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.405] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x36
	[0187.405] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x37
	[0187.405] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797680
	[0187.407] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.407] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f81d62, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80f81d62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80f83167, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1
	[0187.407] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4689310, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0187.408] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4689310, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0
	[0187.408] FindClose (in: hFindFile=0x5797680 | out: hFindFile=0x5797680) returned 1
	[0187.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.408] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x36
	[0187.408] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x37
	[0187.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.408] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x37
	[0187.408] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x38
	[0187.408] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x877953e5, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797340
	[0187.409] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x877953e5, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.409] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abbe5b6, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6abbe5b6, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x6acd6e90, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1
	[0187.409] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877953e5, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x877953e5, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x87797b5c, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x956, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1
	[0187.409] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.410] FindClose (in: hFindFile=0x5797340 | out: hFindFile=0x5797340) returned 1
	[0187.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.410] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x37
	[0187.410] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x37
	[0187.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.410] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x37
	[0187.410] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x38
	[0187.410] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50866c1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797680
	[0187.410] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50866c1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.410] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xa55c36e7, ftLastWriteTime.dwHighDateTime=0x1d7a941, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
	[0187.410] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x50866c1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xde7dde0f, ftLastAccessTime.dwHighDateTime=0x1d7b055, ftLastWriteTime.dwLowDateTime=0xde7dde0f, ftLastWriteTime.dwHighDateTime=0x1d7b055, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0187.411] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xa563624b, ftLastWriteTime.dwHighDateTime=0x1d7a941, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1
	[0187.411] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.411] FindClose (in: hFindFile=0x5797680 | out: hFindFile=0x5797680) returned 1
	[0187.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.411] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x37
	[0187.411] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", lpFilePart=0x0) returned 0x38
	[0187.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.411] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", lpFilePart=0x0) returned 0x38
	[0187.411] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\", lpFilePart=0x0) returned 0x39
	[0187.411] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797800
	[0187.412] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.412] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x567d5b26, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0187.412] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x567d5b26, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0187.412] FindClose (in: hFindFile=0x5797800 | out: hFindFile=0x5797800) returned 1
	[0187.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.413] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", lpFilePart=0x0) returned 0x38
	[0187.413] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x42
	[0187.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.413] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x42
	[0187.413] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x43
	[0187.413] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797980
	[0187.413] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.413] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
	[0187.413] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
	[0187.413] FindClose (in: hFindFile=0x5797980 | out: hFindFile=0x5797980) returned 1
	[0187.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.413] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x42
	[0187.414] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x39
	[0187.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.414] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x39
	[0187.414] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x3a
	[0187.415] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4984c62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4984c62, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797500
	[0187.417] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4984c62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4984c62, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.417] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveContent", cAlternateFileName="LIVECO~1")) returned 1
	[0187.418] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4614163, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4614163, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa46a67ce, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4641, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1
	[0187.418] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.418] FindClose (in: hFindFile=0x5797500 | out: hFindFile=0x5797500) returned 1
	[0187.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.418] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x39
	[0187.419] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x35
	[0187.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.419] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x35
	[0187.419] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x36
	[0187.419] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797440
	[0187.419] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.419] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0187.419] FindClose (in: hFindFile=0x5797440 | out: hFindFile=0x5797440) returned 1
	[0187.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.419] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x35
	[0187.419] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x37
	[0187.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.420] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x37
	[0187.420] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x38
	[0187.420] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaeb77be3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaeb77be3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797980
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaeb77be3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaeb77be3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b1d2cc3, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1d8e71, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x803272d6, ftLastAccessTime.dwHighDateTime=0x1d7ccd5, ftLastWriteTime.dwLowDateTime=0x803272d6, ftLastWriteTime.dwHighDateTime=0x1d7ccd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8c427141, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8c473662, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0187.420] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeb77be3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaebea315, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaebea315, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0187.421] FindNextFileW (in: hFindFile=0x5797980, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeb77be3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaebea315, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaebea315, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0187.421] FindClose (in: hFindFile=0x5797980 | out: hFindFile=0x5797980) returned 1
	[0187.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.421] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x37
	[0187.421] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x34
	[0187.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.421] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x34
	[0187.421] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x35
	[0187.421] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797380
	[0187.421] FindNextFileW (in: hFindFile=0x5797380, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.421] FindNextFileW (in: hFindFile=0x5797380, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0187.421] FindClose (in: hFindFile=0x5797380 | out: hFindFile=0x5797380) returned 1
	[0187.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.422] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x34
	[0187.422] CoTaskMemAlloc (cb=0x20c) returned 0x78eb70
	[0187.422] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x78eb70 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local") returned 0x0
	[0187.423] CoTaskMemFree (pv=0x78eb70) 
	[0187.423] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23
	[0187.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1fc) returned 1
	[0187.423] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x19ed04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23
	[0187.423] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x19ecd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\", lpFilePart=0x0) returned 0x24
	[0187.423] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\*", lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797440
	[0187.423] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.423] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1
	[0187.423] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0187.423] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xb1dfb94f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xb1dfb94f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa7c38835, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x461a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x217bac55, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x217bac55, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73f4dcd0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc699b5c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x777bb418, ftLastAccessTime.dwHighDateTime=0x1d7ccd5, ftLastWriteTime.dwLowDateTime=0x777bb418, ftLastWriteTime.dwHighDateTime=0x1d7ccd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1
	[0187.424] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ef34 | out: lpFindFileData=0x19ef34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.424] FindClose (in: hFindFile=0x5797440 | out: hFindFile=0x5797440) returned 1
	[0187.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1bc) returned 1
	[0187.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c8) returned 1
	[0187.425] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e
	[0187.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ec) returned 1
	[0187.425] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e
	[0187.425] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\", lpFilePart=0x0) returned 0x2f
	[0187.425] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x19ef14 | out: lpFindFileData=0x19ef14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797500
	[0187.425] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.426] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0187.426] FindClose (in: hFindFile=0x5797500 | out: hFindFile=0x5797500) returned 1
	[0187.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1ac) returned 1
	[0187.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1b8) returned 1
	[0187.426] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\.", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e
	[0187.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f168) returned 1
	[0187.426] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x19ec70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e
	[0187.426] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\", nBufferLength=0x105, lpBuffer=0x19ec44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\", lpFilePart=0x0) returned 0x2f
	[0187.426] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797780
	[0187.426] FindNextFileW (in: hFindFile=0x5797780, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.426] FindNextFileW (in: hFindFile=0x5797780, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0187.426] FindClose (in: hFindFile=0x5797780 | out: hFindFile=0x5797780) returned 1
	[0187.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0187.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f134) returned 1
	[0187.426] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x34
	[0187.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ec) returned 1
	[0187.427] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x34
	[0187.427] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\", lpFilePart=0x0) returned 0x35
	[0187.427] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\*", lpFindFileData=0x19ef14 | out: lpFindFileData=0x19ef14*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1b0) returned 1
	[0187.433] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29
	[0187.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ec) returned 1
	[0187.433] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29
	[0187.433] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\", lpFilePart=0x0) returned 0x2a
	[0187.433] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\*", lpFindFileData=0x19ef14 | out: lpFindFileData=0x19ef14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797340
	[0187.433] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.433] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb93c2df4, ftLastAccessTime.dwHighDateTime=0x1d7b056, ftLastWriteTime.dwLowDateTime=0x505354fe, ftLastWriteTime.dwHighDateTime=0x1d7b058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0187.433] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1
	[0187.433] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xc8311e96, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xc8311e96, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1
	[0187.433] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xc8311e96, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xc8311e96, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 0
	[0187.434] FindClose (in: hFindFile=0x5797340 | out: hFindFile=0x5797340) returned 1
	[0187.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1ac) returned 1
	[0187.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1b8) returned 1
	[0187.434] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\.", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29
	[0187.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f168) returned 1
	[0187.434] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x19ec70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29
	[0187.434] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\", nBufferLength=0x105, lpBuffer=0x19ec44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\", lpFilePart=0x0) returned 0x2a
	[0187.434] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\*", lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797380
	[0187.434] FindNextFileW (in: hFindFile=0x5797380, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.434] FindNextFileW (in: hFindFile=0x5797380, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb93c2df4, ftLastAccessTime.dwHighDateTime=0x1d7b056, ftLastWriteTime.dwLowDateTime=0x505354fe, ftLastWriteTime.dwHighDateTime=0x1d7b058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0187.434] FindNextFileW (in: hFindFile=0x5797380, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1
	[0187.434] FindNextFileW (in: hFindFile=0x5797380, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xc8311e96, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xc8311e96, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1
	[0187.434] FindNextFileW (in: hFindFile=0x5797380, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.435] FindClose (in: hFindFile=0x5797380 | out: hFindFile=0x5797380) returned 1
	[0187.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0187.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f134) returned 1
	[0187.435] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e
	[0187.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.435] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e
	[0187.435] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\", lpFilePart=0x0) returned 0x2f
	[0187.435] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xf04ec4ef, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xf04ed921, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797440
	[0187.435] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xf04ec4ef, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xf04ed921, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.435] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b315521, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xf04ed921, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xf04eec82, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1
	[0187.435] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.435] FindClose (in: hFindFile=0x5797440 | out: hFindFile=0x5797440) returned 1
	[0187.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.436] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e
	[0187.436] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32
	[0187.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.436] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32
	[0187.436] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\", lpFilePart=0x0) returned 0x33
	[0187.436] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797580
	[0187.436] FindNextFileW (in: hFindFile=0x5797580, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.436] FindNextFileW (in: hFindFile=0x5797580, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0187.436] FindClose (in: hFindFile=0x5797580 | out: hFindFile=0x5797580) returned 1
	[0187.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.440] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32
	[0187.440] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34
	[0187.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.440] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34
	[0187.440] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\", lpFilePart=0x0) returned 0x35
	[0187.440] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xc8311e96, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xc8311e96, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797840
	[0187.441] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xc8311e96, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xc8311e96, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.441] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23a0d188, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23a0d188, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc82fe634, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x600000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1
	[0187.441] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8311e96, ftCreationTime.dwHighDateTime=0x1d7b06c, ftLastAccessTime.dwLowDateTime=0xc8311e96, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xc833902e, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp.edb", cAlternateFileName="")) returned 1
	[0187.441] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239e71ab, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239e71ab, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc82d1332, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.chk", cAlternateFileName="")) returned 1
	[0187.441] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc82d271a, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.log", cAlternateFileName="")) returned 1
	[0187.441] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1
	[0187.457] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1
	[0187.458] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xdd289e64, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.log", cAlternateFileName="")) returned 1
	[0187.458] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.458] FindClose (in: hFindFile=0x5797840 | out: hFindFile=0x5797840) returned 1
	[0187.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.458] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34
	[0187.458] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", lpFilePart=0x0) returned 0x2b
	[0187.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ec) returned 1
	[0187.458] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", lpFilePart=0x0) returned 0x2b
	[0187.458] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\", lpFilePart=0x0) returned 0x2c
	[0187.458] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\*", lpFindFileData=0x19ef14 | out: lpFindFileData=0x19ef14*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1b0) returned 1
	[0187.460] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d
	[0187.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ec) returned 1
	[0187.460] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d
	[0187.460] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x2e
	[0187.460] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x19ef14 | out: lpFindFileData=0x19ef14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797500
	[0187.462] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe08cb400, ftLastAccessTime.dwHighDateTime=0x1d7b055, ftLastWriteTime.dwLowDateTime=0xe08cb400, ftLastWriteTime.dwHighDateTime=0x1d7b055, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f6ba6d, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4f6ba6d, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4fb4e6d, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4fb4e6d, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1
	[0187.463] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1
	[0187.480] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1
	[0187.480] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5d767277, ftLastAccessTime.dwHighDateTime=0x1d7ccd5, ftLastWriteTime.dwLowDateTime=0x5d767277, ftLastWriteTime.dwHighDateTime=0x1d7ccd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0187.480] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0187.480] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0187.481] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x84c1ec39, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84c1ec39, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1
	[0187.481] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a11cf49, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0187.481] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1
	[0187.481] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0187.481] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xfdddef96, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xfdddef96, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0187.481] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1
	[0187.481] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0187.481] FindNextFileW (in: hFindFile=0x5797500, lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0
	[0187.482] FindClose (in: hFindFile=0x5797500 | out: hFindFile=0x5797500) returned 1
	[0187.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1ac) returned 1
	[0187.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1b8) returned 1
	[0187.482] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\.", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d
	[0187.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f168) returned 1
	[0187.482] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ec70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d
	[0187.482] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x19ec44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x2e
	[0187.482] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797680
	[0187.482] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.483] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1
	[0187.483] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1
	[0187.483] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe08cb400, ftLastAccessTime.dwHighDateTime=0x1d7b055, ftLastWriteTime.dwLowDateTime=0xe08cb400, ftLastWriteTime.dwHighDateTime=0x1d7b055, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0187.483] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f6ba6d, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4f6ba6d, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0187.483] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4fb4e6d, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4fb4e6d, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0187.483] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0187.483] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5d767277, ftLastAccessTime.dwHighDateTime=0x1d7ccd5, ftLastWriteTime.dwLowDateTime=0x5d767277, ftLastWriteTime.dwHighDateTime=0x1d7ccd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x84c1ec39, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84c1ec39, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a11cf49, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0187.484] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xfdddef96, ftLastAccessTime.dwHighDateTime=0x1d7b06c, ftLastWriteTime.dwLowDateTime=0xfdddef96, ftLastWriteTime.dwHighDateTime=0x1d7b06c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0187.485] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1
	[0187.485] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0187.485] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19eea0 | out: lpFindFileData=0x19eea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.485] FindClose (in: hFindFile=0x5797680 | out: hFindFile=0x5797680) returned 1
	[0187.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0187.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f134) returned 1
	[0187.485] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36
	[0187.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.485] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36
	[0187.485] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\", lpFilePart=0x0) returned 0x37
	[0187.485] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797840
	[0187.486] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.486] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1
	[0187.486] FindNextFileW (in: hFindFile=0x5797840, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0
	[0187.486] FindClose (in: hFindFile=0x5797840 | out: hFindFile=0x5797840) returned 1
	[0187.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.487] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36
	[0187.487] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39
	[0187.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.487] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39
	[0187.487] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\", lpFilePart=0x0) returned 0x3a
	[0187.487] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797340
	[0187.487] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.487] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1
	[0187.488] FindNextFileW (in: hFindFile=0x5797340, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0
	[0187.488] FindClose (in: hFindFile=0x5797340 | out: hFindFile=0x5797340) returned 1
	[0187.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.488] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39
	[0187.488] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39
	[0187.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.488] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39
	[0187.488] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x3a
	[0187.488] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe08cb400, ftLastAccessTime.dwHighDateTime=0x1d7b055, ftLastWriteTime.dwLowDateTime=0xe08cb400, ftLastWriteTime.dwHighDateTime=0x1d7b055, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797440
	[0187.488] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe08cb400, ftLastAccessTime.dwHighDateTime=0x1d7b055, ftLastWriteTime.dwLowDateTime=0xe08cb400, ftLastWriteTime.dwHighDateTime=0x1d7b055, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.488] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x508b12b7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe08cb400, ftLastAccessTime.dwHighDateTime=0x1d7b055, ftLastWriteTime.dwLowDateTime=0xe08cc733, ftLastWriteTime.dwHighDateTime=0x1d7b055, nFileSizeHigh=0x0, nFileSizeLow=0x2ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1
	[0187.489] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.489] FindClose (in: hFindFile=0x5797440 | out: hFindFile=0x5797440) returned 1
	[0187.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.489] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39
	[0187.489] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33
	[0187.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.489] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33
	[0187.489] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x34
	[0187.489] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f6ba6d, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4f6ba6d, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797800
	[0187.489] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f6ba6d, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4f6ba6d, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.490] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f6ba6d, ftCreationTime.dwHighDateTime=0x1d7b06d, ftLastAccessTime.dwLowDateTime=0x4f6ba6d, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x58d97e7, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0187.490] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x4f3fac5, ftCreationTime.dwHighDateTime=0x1d7b06d, ftLastAccessTime.dwLowDateTime=0x4f55ad0, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4f55ad0, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0187.490] FindNextFileW (in: hFindFile=0x5797800, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x4f3fac5, ftCreationTime.dwHighDateTime=0x1d7b06d, ftLastAccessTime.dwLowDateTime=0x4f55ad0, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4f55ad0, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
	[0187.490] FindClose (in: hFindFile=0x5797800 | out: hFindFile=0x5797800) returned 1
	[0187.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.490] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33
	[0187.490] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39
	[0187.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.490] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39
	[0187.490] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x3a
	[0187.490] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4fb4e6d, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4fb4e6d, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797540
	[0187.491] FindNextFileW (in: hFindFile=0x5797540, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4fb4e6d, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4fb4e6d, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.491] FindNextFileW (in: hFindFile=0x5797540, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4fb26d5, ftCreationTime.dwHighDateTime=0x1d7b06d, ftLastAccessTime.dwLowDateTime=0x4fb26d5, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4fb26d5, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2VW0X3SA", cAlternateFileName="")) returned 1
	[0187.491] FindNextFileW (in: hFindFile=0x5797540, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f44915, ftCreationTime.dwHighDateTime=0x1d7b06d, ftLastAccessTime.dwLowDateTime=0x4f44915, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4f44915, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1
	[0187.491] FindNextFileW (in: hFindFile=0x5797540, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4fb1351, ftCreationTime.dwHighDateTime=0x1d7b06d, ftLastAccessTime.dwLowDateTime=0x4fb1351, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4fb1351, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="H7HJCZ23", cAlternateFileName="")) returned 1
	[0187.491] FindNextFileW (in: hFindFile=0x5797540, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4fb1351, ftCreationTime.dwHighDateTime=0x1d7b06d, ftLastAccessTime.dwLowDateTime=0x4fb1351, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4fb1351, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="O0MP5FHD", cAlternateFileName="")) returned 1
	[0187.491] FindNextFileW (in: hFindFile=0x5797540, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4fb1351, ftCreationTime.dwHighDateTime=0x1d7b06d, ftLastAccessTime.dwLowDateTime=0x4fb1351, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4fb1351, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZQBNNMI1", cAlternateFileName="")) returned 1
	[0187.492] FindNextFileW (in: hFindFile=0x5797540, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4fb1351, ftCreationTime.dwHighDateTime=0x1d7b06d, ftLastAccessTime.dwLowDateTime=0x4fb1351, ftLastAccessTime.dwHighDateTime=0x1d7b06d, ftLastWriteTime.dwLowDateTime=0x4fb1351, ftLastWriteTime.dwHighDateTime=0x1d7b06d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZQBNNMI1", cAlternateFileName="")) returned 0
	[0187.492] FindClose (in: hFindFile=0x5797540 | out: hFindFile=0x5797540) returned 1
	[0187.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.492] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39
	[0187.492] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33
	[0187.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.492] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33
	[0187.492] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x34
	[0187.492] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797680
	[0187.493] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.493] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a184b86, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a4e76b4, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1
	[0187.493] FindNextFileW (in: hFindFile=0x5797680, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.493] FindClose (in: hFindFile=0x5797680 | out: hFindFile=0x5797680) returned 1
	[0187.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.493] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\.", nBufferLength=0x105, lpBuffer=0x19ec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33
	[0187.493] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x19ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35
	[0187.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.493] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x19ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35
	[0187.493] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\", lpFilePart=0x0) returned 0x36
	[0187.493] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x19ee80 | out: lpFindFileData=0x19ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5797440
	[0187.494] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.494] FindNextFileW (in: hFindFile=0x5797440, lpFindFileData=0x19ee90 | out: lpFindFileData=0x19ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7db342, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x212d1b5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1
	[0187.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ec) returned 1
	[0187.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1ac) returned 1
	[0187.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1b8) returned 1
	[0187.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f168) returned 1
	[0187.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0187.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f134) returned 1
	[0187.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ec) returned 1
	[0187.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1ac) returned 1
	[0187.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1b8) returned 1
	[0187.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f168) returned 1
	[0187.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0187.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f134) returned 1
	[0187.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f124) returned 1
	[0187.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f158) returned 1
	[0187.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f118) returned 1
	[0187.778] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.778] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Battle.net", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net") returned 0x2f
	[0187.778] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net", lpFilePart=0x0) returned 0x2e
	[0187.778] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\", lpFilePart=0x0) returned 0x2f
	[0187.779] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.782] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.782] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chromium\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data") returned 0x37
	[0187.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.782] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data", lpFilePart=0x0) returned 0x36
	[0187.782] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", lpFilePart=0x0) returned 0x37
	[0187.782] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.785] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.785] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Google\\Chrome\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x3c
	[0187.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.785] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3b
	[0187.785] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0187.785] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.787] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.787] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Google(x86)\\Chrome\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data") returned 0x41
	[0187.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.788] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data", lpFilePart=0x0) returned 0x40
	[0187.788] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x41
	[0187.788] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.790] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.790] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Opera Software\\", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\") returned 0x36
	[0187.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.790] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", lpFilePart=0x0) returned 0x35
	[0187.790] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", lpFilePart=0x0) returned 0x35
	[0187.790] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.792] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.792] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data") returned 0x45
	[0187.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.792] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", lpFilePart=0x0) returned 0x44
	[0187.792] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", lpFilePart=0x0) returned 0x45
	[0187.792] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.796] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.796] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Iridium\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data") returned 0x36
	[0187.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.796] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data", lpFilePart=0x0) returned 0x35
	[0187.797] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", lpFilePart=0x0) returned 0x36
	[0187.797] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.799] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.799] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\7Star\\7Star\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data") returned 0x3a
	[0187.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.799] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data", lpFilePart=0x0) returned 0x39
	[0187.799] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", lpFilePart=0x0) returned 0x3a
	[0187.800] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.802] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.802] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CentBrowser\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data") returned 0x3a
	[0187.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.802] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data", lpFilePart=0x0) returned 0x39
	[0187.802] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", lpFilePart=0x0) returned 0x3a
	[0187.802] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.804] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.804] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chedot\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data") returned 0x35
	[0187.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.804] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data", lpFilePart=0x0) returned 0x34
	[0187.805] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", lpFilePart=0x0) returned 0x35
	[0187.805] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.807] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.807] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Vivaldi\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data") returned 0x36
	[0187.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.807] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data", lpFilePart=0x0) returned 0x35
	[0187.807] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", lpFilePart=0x0) returned 0x36
	[0187.808] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.809] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.809] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Kometa\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data") returned 0x35
	[0187.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.810] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data", lpFilePart=0x0) returned 0x34
	[0187.810] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", lpFilePart=0x0) returned 0x35
	[0187.810] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.812] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.812] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Elements Browser\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data") returned 0x3f
	[0187.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.812] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data", lpFilePart=0x0) returned 0x3e
	[0187.812] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", lpFilePart=0x0) returned 0x3f
	[0187.812] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.814] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.814] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Epic Privacy Browser\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data") returned 0x43
	[0187.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.814] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", lpFilePart=0x0) returned 0x42
	[0187.814] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\", lpFilePart=0x0) returned 0x43
	[0187.815] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.816] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.817] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\uCozMedia\\Uran\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data") returned 0x3d
	[0187.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.817] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data", lpFilePart=0x0) returned 0x3c
	[0187.817] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0187.817] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.819] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.819] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer") returned 0x58
	[0187.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.820] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", lpFilePart=0x0) returned 0x57
	[0187.820] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", lpFilePart=0x0) returned 0x58
	[0187.820] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.821] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.822] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data") returned 0x43
	[0187.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.822] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", lpFilePart=0x0) returned 0x42
	[0187.822] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", lpFilePart=0x0) returned 0x43
	[0187.822] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.824] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.824] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Coowon\\Coowon\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data") returned 0x3c
	[0187.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.824] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data", lpFilePart=0x0) returned 0x3b
	[0187.824] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0187.824] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.826] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.826] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\liebao\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data") returned 0x35
	[0187.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.826] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data", lpFilePart=0x0) returned 0x34
	[0187.826] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", lpFilePart=0x0) returned 0x35
	[0187.826] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.828] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.828] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\QIP Surf\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data") returned 0x37
	[0187.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.828] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data", lpFilePart=0x0) returned 0x36
	[0187.829] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", lpFilePart=0x0) returned 0x37
	[0187.829] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.830] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.830] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Orbitum\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data") returned 0x36
	[0187.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.831] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data", lpFilePart=0x0) returned 0x35
	[0187.831] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", lpFilePart=0x0) returned 0x36
	[0187.831] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.835] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.835] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Comodo\\Dragon\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data") returned 0x3c
	[0187.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.835] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data", lpFilePart=0x0) returned 0x3b
	[0187.835] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0187.836] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.837] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.837] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Amigo\\User\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data") returned 0x39
	[0187.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.837] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data", lpFilePart=0x0) returned 0x38
	[0187.837] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", lpFilePart=0x0) returned 0x39
	[0187.838] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.841] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.841] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Torch\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data") returned 0x34
	[0187.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.841] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data", lpFilePart=0x0) returned 0x33
	[0187.841] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", lpFilePart=0x0) returned 0x34
	[0187.841] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.843] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.843] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data") returned 0x43
	[0187.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", lpFilePart=0x0) returned 0x42
	[0187.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", lpFilePart=0x0) returned 0x43
	[0187.844] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.845] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.845] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Comodo\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data") returned 0x35
	[0187.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.845] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data", lpFilePart=0x0) returned 0x34
	[0187.845] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", lpFilePart=0x0) returned 0x35
	[0187.846] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.847] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.847] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\360Browser\\Browser\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data") returned 0x41
	[0187.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.848] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data", lpFilePart=0x0) returned 0x40
	[0187.848] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", lpFilePart=0x0) returned 0x41
	[0187.848] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.860] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.861] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Maxthon3\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data") returned 0x37
	[0187.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.861] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data", lpFilePart=0x0) returned 0x36
	[0187.861] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", lpFilePart=0x0) returned 0x37
	[0187.861] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.863] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.863] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\K-Melon\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data") returned 0x36
	[0187.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.864] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data", lpFilePart=0x0) returned 0x35
	[0187.864] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", lpFilePart=0x0) returned 0x36
	[0187.864] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.866] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.867] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Sputnik\\Sputnik\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data") returned 0x3e
	[0187.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.867] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data", lpFilePart=0x0) returned 0x3d
	[0187.867] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", lpFilePart=0x0) returned 0x3e
	[0187.867] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.869] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.869] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Nichrome\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data") returned 0x37
	[0187.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.870] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.872] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.872] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CocCoc\\Browser\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data") returned 0x3d
	[0187.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.872] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.874] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.874] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Uran\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data") returned 0x33
	[0187.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.875] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.876] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.876] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chromodo\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data") returned 0x37
	[0187.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.877] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.879] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.879] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Mail.Ru\\Atom\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data") returned 0x3b
	[0187.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.879] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.883] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.883] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data") returned 0x4a
	[0187.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.886] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.886] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Microsoft\\Edge\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data") returned 0x3d
	[0187.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.888] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.888] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience") returned 0x51
	[0187.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.889] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\*", lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.891] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.891] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Steam", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam") returned 0x2a
	[0187.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.892] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0187.892] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CryptoTab Browser\\User Data", lpDst=0x19f124, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data") returned 0x40
	[0187.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0187.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f184) returned 1
	[0187.920] GetCurrentProcessId () returned 0xe4c
	[0187.923] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x19ec34 | out: lpLuid=0x19ec34*(LowPart=0x14, HighPart=0)) returned 1
	[0187.926] GetCurrentProcess () returned 0xffffffff
	[0187.927] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ec30 | out: TokenHandle=0x19ec30*=0x66c) returned 1
	[0187.927] AdjustTokenPrivileges (in: TokenHandle=0x66c, DisableAllPrivileges=0, NewState=0x29d5b04*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0187.927] CloseHandle (hObject=0x66c) returned 1
	[0187.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3707348, Length=0x20000, ResultLength=0x19f314 | out: SystemInformation=0x3707348, ResultLength=0x19f314*=0x17698) returned 0x0
	[0187.952] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2fc | out: puCount=0x19f2fc*=0x2) returned 0x0
	[0187.952] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2f8*=0xf, pszText=0x0) returned 0x0
	[0187.952] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0187.953] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f288 | out: ppv=0x19f288*=0x6d0ae4) returned 0x0
	[0187.953] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f280 | out: pAptType=0x19f280*=1) returned 0x0
	[0187.953] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f284 | out: ppvObject=0x19f284*=0x0) returned 0x80004002
	[0187.953] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0187.954] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eea8 | out: ppv=0x19eea8*=0x57c1808) returned 0x0
	[0187.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57c1808, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f0c0 | out: ppvObject=0x19f0c0*=0x0) returned 0x80004002
	[0187.955] WbemLocator:IClassFactory:CreateInstance (in: This=0x57c1808, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0d4 | out: ppvObject=0x19f0d4*=0x57a2d08) returned 0x0
	[0187.955] WbemLocator:IUnknown:Release (This=0x57c1808) returned 0x0
	[0187.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d08, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecf4 | out: ppvObject=0x19ecf4*=0x57a2d08) returned 0x0
	[0187.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d08, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecb0 | out: ppvObject=0x19ecb0*=0x0) returned 0x80004002
	[0187.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d08, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8a4 | out: ppvObject=0x19e8a4*=0x0) returned 0x80004002
	[0187.955] WbemLocator:IUnknown:AddRef (This=0x57a2d08) returned 0x3
	[0187.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d08, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0187.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d08, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5bc | out: ppvObject=0x19e5bc*=0x0) returned 0x80004002
	[0187.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d08, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5c8 | out: ppvObject=0x19e5c8*=0x0) returned 0x80004002
	[0187.955] CoGetContextToken (in: pToken=0x19e628 | out: pToken=0x19e628) returned 0x0
	[0187.955] CoGetContextToken (in: pToken=0x19ea30 | out: pToken=0x19ea30) returned 0x0
	[0187.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d08, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eac0 | out: ppvObject=0x19eac0*=0x0) returned 0x80004002
	[0187.955] WbemLocator:IUnknown:Release (This=0x57a2d08) returned 0x2
	[0187.955] WbemLocator:IUnknown:Release (This=0x57a2d08) returned 0x1
	[0187.955] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0187.955] CoGetContextToken (in: pToken=0x19f000 | out: pToken=0x19f000) returned 0x0
	[0187.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2d08, riid=0x19f0d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f0cc | out: ppvObject=0x19f0cc*=0x57a2d08) returned 0x0
	[0187.955] WbemLocator:IUnknown:AddRef (This=0x57a2d08) returned 0x3
	[0187.955] WbemLocator:IUnknown:Release (This=0x57a2d08) returned 0x2
	[0187.956] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f264 | out: puCount=0x19f264*=0x2) returned 0x0
	[0187.956] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f260*=0x0, pszText=0x0 | out: puBuffLength=0x19f260*=0xf, pszText=0x0) returned 0x0
	[0187.956] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f260*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f260*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0187.956] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f13c | out: ppv=0x19f13c*=0x57a2ea8) returned 0x0
	[0187.956] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2ea8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1d0 | out: ppNamespace=0x19f1d0*=0x785a70) returned 0x0
	[0187.985] WbemLocator:IUnknown:QueryInterface (in: This=0x785a70, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f06c | out: ppvObject=0x19f06c*=0x57b08d4) returned 0x0
	[0187.985] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b08d4, pProxy=0x785a70, pAuthnSvc=0x19f0bc, pAuthzSvc=0x19f0b8, pServerPrincName=0x19f0b0, pAuthnLevel=0x19f0b4, pImpLevel=0x19f0a4, pAuthInfo=0x19f0a8, pCapabilites=0x19f0ac | out: pAuthnSvc=0x19f0bc*=0xa, pAuthzSvc=0x19f0b8*=0x0, pServerPrincName=0x19f0b0, pAuthnLevel=0x19f0b4*=0x6, pImpLevel=0x19f0a4*=0x2, pAuthInfo=0x19f0a8, pCapabilites=0x19f0ac*=0x1) returned 0x0
	[0187.986] WbemLocator:IUnknown:Release (This=0x57b08d4) returned 0x1
	[0187.986] WbemLocator:IUnknown:QueryInterface (in: This=0x785a70, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x57b08f8) returned 0x0
	[0187.986] WbemLocator:IUnknown:QueryInterface (in: This=0x785a70, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f05c | out: ppvObject=0x19f05c*=0x57b08d4) returned 0x0
	[0187.986] WbemLocator:IClientSecurity:SetBlanket (This=0x57b08d4, pProxy=0x785a70, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0187.986] WbemLocator:IUnknown:Release (This=0x57b08d4) returned 0x2
	[0187.986] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x1
	[0187.986] CoTaskMemFree (pv=0x57b7e70) 
	[0187.987] WbemLocator:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0187.987] WbemLocator:IUnknown:QueryInterface (in: This=0x785a70, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec5c | out: ppvObject=0x19ec5c*=0x57b08f8) returned 0x0
	[0187.987] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec18 | out: ppvObject=0x19ec18*=0x0) returned 0x80004002
	[0187.991] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0187.995] WbemLocator:IUnknown:QueryInterface (in: This=0x785a70, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e80c | out: ppvObject=0x19e80c*=0x0) returned 0x80004002
	[0187.996] WbemLocator:IUnknown:AddRef (This=0x57b08f8) returned 0x3
	[0187.996] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e574 | out: ppvObject=0x19e574*=0x0) returned 0x80004002
	[0187.996] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e524 | out: ppvObject=0x19e524*=0x0) returned 0x80004002
	[0187.996] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e530 | out: ppvObject=0x19e530*=0x57b0854) returned 0x0
	[0187.996] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0854, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e538 | out: pCid=0x19e538*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0187.997] WbemLocator:IUnknown:Release (This=0x57b0854) returned 0x3
	[0187.997] CoGetContextToken (in: pToken=0x19e590 | out: pToken=0x19e590) returned 0x0
	[0187.997] CoGetContextToken (in: pToken=0x19e998 | out: pToken=0x19e998) returned 0x0
	[0187.997] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x57b08dc) returned 0x0
	[0187.997] WbemLocator:IRpcOptions:Query (in: This=0x57b08dc, pPrx=0x57b08f8, dwProperty=2, pdwValue=0x19ea50 | out: pdwValue=0x19ea50) returned 0x80004002
	[0187.997] WbemLocator:IUnknown:Release (This=0x57b08dc) returned 0x3
	[0187.997] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x2
	[0187.997] CoGetContextToken (in: pToken=0x19ef70 | out: pToken=0x19ef70) returned 0x0
	[0187.997] CoGetContextToken (in: pToken=0x19eed0 | out: pToken=0x19eed0) returned 0x0
	[0187.997] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x19efa0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef9c | out: ppvObject=0x19ef9c*=0x785a70) returned 0x0
	[0187.997] WbemLocator:IUnknown:AddRef (This=0x785a70) returned 0x4
	[0187.997] WbemLocator:IUnknown:Release (This=0x785a70) returned 0x3
	[0187.997] WbemLocator:IUnknown:Release (This=0x785a70) returned 0x2
	[0187.997] SysStringLen (param_1=0x0) returned 0x0
	[0187.997] CoGetContextToken (in: pToken=0x19ef68 | out: pToken=0x19ef68) returned 0x0
	[0187.997] WbemLocator:IUnknown:AddRef (This=0x57b08f8) returned 0x3
	[0187.997] WbemLocator:IUnknown:QueryInterface (in: This=0x57b08f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edfc | out: ppvObject=0x19edfc*=0x57b08f8) returned 0x0
	[0187.998] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x3
	[0187.998] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x2
	[0187.998] CoGetContextToken (in: pToken=0x19f038 | out: pToken=0x19f038) returned 0x0
	[0187.998] WbemLocator:IUnknown:AddRef (This=0x785a70) returned 0x3
	[0187.998] IWbemServices:ExecQuery (in: This=0x785a70, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Process Where SessionId='1'", lFlags=16, pCtx=0x0, ppEnum=0x19f26c | out: ppEnum=0x19f26c*=0x78a650) returned 0x0
	[0188.037] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0ac | out: ppvObject=0x19f0ac*=0x78a654) returned 0x0
	[0188.037] IClientSecurity:QueryBlanket (in: This=0x78a654, pProxy=0x78a650, pAuthnSvc=0x19f0fc, pAuthzSvc=0x19f0f8, pServerPrincName=0x19f0f0, pAuthnLevel=0x19f0f4, pImpLevel=0x19f0e4, pAuthInfo=0x19f0e8, pCapabilites=0x19f0ec | out: pAuthnSvc=0x19f0fc*=0xa, pAuthzSvc=0x19f0f8*=0x0, pServerPrincName=0x19f0f0, pAuthnLevel=0x19f0f4*=0x6, pImpLevel=0x19f0e4*=0x2, pAuthInfo=0x19f0e8, pCapabilites=0x19f0ec*=0x1) returned 0x0
	[0188.037] IUnknown:Release (This=0x78a654) returned 0x1
	[0188.037] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a0 | out: ppvObject=0x19f0a0*=0x57b05f8) returned 0x0
	[0188.038] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x78a654) returned 0x0
	[0188.038] IClientSecurity:SetBlanket (This=0x78a654, pProxy=0x78a650, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0188.039] IUnknown:Release (This=0x78a654) returned 0x2
	[0188.039] WbemLocator:IUnknown:Release (This=0x57b05f8) returned 0x1
	[0188.039] CoTaskMemFree (pv=0x57b7fc0) 
	[0188.040] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec98 | out: ppvObject=0x19ec98*=0x57b05f8) returned 0x0
	[0188.040] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec54 | out: ppvObject=0x19ec54*=0x0) returned 0x80004002
	[0188.040] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea74 | out: ppvObject=0x19ea74*=0x0) returned 0x80004002
	[0188.041] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e84c | out: ppvObject=0x19e84c*=0x0) returned 0x80004002
	[0188.041] WbemLocator:IUnknown:AddRef (This=0x57b05f8) returned 0x3
	[0188.041] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5b4 | out: ppvObject=0x19e5b4*=0x0) returned 0x80004002
	[0188.041] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e564 | out: ppvObject=0x19e564*=0x0) returned 0x80004002
	[0188.041] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e570 | out: ppvObject=0x19e570*=0x57b0554) returned 0x0
	[0188.041] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0554, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e578 | out: pCid=0x19e578*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.041] WbemLocator:IUnknown:Release (This=0x57b0554) returned 0x3
	[0188.041] CoGetContextToken (in: pToken=0x19e5d0 | out: pToken=0x19e5d0) returned 0x0
	[0188.041] CoGetContextToken (in: pToken=0x19e9d8 | out: pToken=0x19e9d8) returned 0x0
	[0188.042] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea68 | out: ppvObject=0x19ea68*=0x57b05dc) returned 0x0
	[0188.042] WbemLocator:IRpcOptions:Query (in: This=0x57b05dc, pPrx=0x57b05f8, dwProperty=2, pdwValue=0x19ea90 | out: pdwValue=0x19ea90) returned 0x80004002
	[0188.042] WbemLocator:IUnknown:Release (This=0x57b05dc) returned 0x3
	[0188.042] WbemLocator:IUnknown:Release (This=0x57b05f8) returned 0x2
	[0188.042] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0188.042] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0188.042] WbemLocator:IUnknown:QueryInterface (in: This=0x57b05f8, riid=0x19efd8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efd4 | out: ppvObject=0x19efd4*=0x78a650) returned 0x0
	[0188.042] IUnknown:AddRef (This=0x78a650) returned 0x4
	[0188.042] IUnknown:Release (This=0x78a650) returned 0x3
	[0188.042] IUnknown:Release (This=0x78a650) returned 0x2
	[0188.042] WbemLocator:IUnknown:Release (This=0x785a70) returned 0x2
	[0188.042] SysStringLen (param_1=0x0) returned 0x0
	[0188.042] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2b8 | out: puCount=0x19f2b8*=0x2) returned 0x0
	[0188.042] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b4*=0xf, pszText=0x0) returned 0x0
	[0188.042] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.042] CoGetContextToken (in: pToken=0x19f108 | out: pToken=0x19f108) returned 0x0
	[0188.042] IUnknown:AddRef (This=0x78a650) returned 0x3
	[0188.042] IEnumWbemClassObject:Clone (in: This=0x78a650, ppEnum=0x19f2c4 | out: ppEnum=0x19f2c4*=0x78ad58) returned 0x0
	[0188.044] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f188 | out: ppvObject=0x19f188*=0x78ad5c) returned 0x0
	[0188.044] IClientSecurity:QueryBlanket (in: This=0x78ad5c, pProxy=0x78ad58, pAuthnSvc=0x19f1d8, pAuthzSvc=0x19f1d4, pServerPrincName=0x19f1cc, pAuthnLevel=0x19f1d0, pImpLevel=0x19f1c0, pAuthInfo=0x19f1c4, pCapabilites=0x19f1c8 | out: pAuthnSvc=0x19f1d8*=0xa, pAuthzSvc=0x19f1d4*=0x0, pServerPrincName=0x19f1cc, pAuthnLevel=0x19f1d0*=0x6, pImpLevel=0x19f1c0*=0x2, pAuthInfo=0x19f1c4, pCapabilites=0x19f1c8*=0x1) returned 0x0
	[0188.044] IUnknown:Release (This=0x78ad5c) returned 0x1
	[0188.044] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f17c | out: ppvObject=0x19f17c*=0x57b1cf8) returned 0x0
	[0188.044] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f178 | out: ppvObject=0x19f178*=0x78ad5c) returned 0x0
	[0188.045] IClientSecurity:SetBlanket (This=0x78ad5c, pProxy=0x78ad58, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0188.047] IUnknown:Release (This=0x78ad5c) returned 0x2
	[0188.047] WbemLocator:IUnknown:Release (This=0x57b1cf8) returned 0x1
	[0188.047] CoTaskMemFree (pv=0x57b7fc0) 
	[0188.112] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x57b1cf8) returned 0x0
	[0188.113] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ed20 | out: ppvObject=0x19ed20*=0x0) returned 0x80004002
	[0188.113] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb3c | out: ppvObject=0x19eb3c*=0x0) returned 0x80004002
	[0188.114] IUnknown:QueryInterface (in: This=0x78ad58, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e914 | out: ppvObject=0x19e914*=0x0) returned 0x80004002
	[0188.114] WbemLocator:IUnknown:AddRef (This=0x57b1cf8) returned 0x3
	[0188.114] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e67c | out: ppvObject=0x19e67c*=0x0) returned 0x80004002
	[0188.114] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.114] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e638 | out: ppvObject=0x19e638*=0x57b1c54) returned 0x0
	[0188.114] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1c54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e640 | out: pCid=0x19e640*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.114] WbemLocator:IUnknown:Release (This=0x57b1c54) returned 0x3
	[0188.114] CoGetContextToken (in: pToken=0x19e698 | out: pToken=0x19e698) returned 0x0
	[0188.115] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0188.115] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb30 | out: ppvObject=0x19eb30*=0x57b1cdc) returned 0x0
	[0188.122] WbemLocator:IRpcOptions:Query (in: This=0x57b1cdc, pPrx=0x57b1cf8, dwProperty=2, pdwValue=0x19eb58 | out: pdwValue=0x19eb58) returned 0x80004002
	[0188.122] WbemLocator:IUnknown:Release (This=0x57b1cdc) returned 0x3
	[0188.122] WbemLocator:IUnknown:Release (This=0x57b1cf8) returned 0x2
	[0188.122] CoGetContextToken (in: pToken=0x19f078 | out: pToken=0x19f078) returned 0x0
	[0188.122] CoGetContextToken (in: pToken=0x19efd8 | out: pToken=0x19efd8) returned 0x0
	[0188.122] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1cf8, riid=0x19f0a8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f0a4 | out: ppvObject=0x19f0a4*=0x78ad58) returned 0x0
	[0188.122] IUnknown:AddRef (This=0x78ad58) returned 0x4
	[0188.123] IUnknown:Release (This=0x78ad58) returned 0x3
	[0188.123] IUnknown:Release (This=0x78ad58) returned 0x2
	[0188.123] IUnknown:Release (This=0x78a650) returned 0x2
	[0188.123] SysStringLen (param_1=0x0) returned 0x0
	[0188.123] IEnumWbemClassObject:Reset (This=0x78ad58) returned 0x0
	[0188.123] CoTaskMemAlloc (cb=0x4) returned 0x57a2dc8
	[0188.124] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dc8, puReturned=0x29fc548 | out: apObjects=0x57a2dc8*=0x57b7330, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.364] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x57b7330) returned 0x0
	[0188.364] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.364] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.364] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.364] IUnknown:AddRef (This=0x57b7330) returned 0x3
	[0188.364] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.364] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.364] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x57b7334) returned 0x0
	[0188.364] IMarshal:GetUnmarshalClass (in: This=0x57b7334, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.364] IUnknown:Release (This=0x57b7334) returned 0x3
	[0188.364] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.364] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.364] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.365] IUnknown:Release (This=0x57b7330) returned 0x2
	[0188.365] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.365] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.365] IUnknown:QueryInterface (in: This=0x57b7330, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x57b7330) returned 0x0
	[0188.365] IUnknown:AddRef (This=0x57b7330) returned 0x4
	[0188.365] IUnknown:Release (This=0x57b7330) returned 0x3
	[0188.365] IUnknown:Release (This=0x57b7330) returned 0x2
	[0188.365] CoTaskMemFree (pv=0x57a2dc8) 
	[0188.365] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.365] IUnknown:AddRef (This=0x57b7330) returned 0x3
	[0188.365] IWbemClassObject:Get (in: This=0x57b7330, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.365] IWbemClassObject:Get (in: This=0x57b7330, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.365] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x5c
	[0188.365] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x5c
	[0188.365] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.365] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.365] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.365] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.366] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d48) returned 0x0
	[0188.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d48, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.367] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d48, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac1a8) returned 0x0
	[0188.367] WbemDefPath:IUnknown:Release (This=0x57a2d48) returned 0x0
	[0188.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac1a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac1a8) returned 0x0
	[0188.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac1a8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac1a8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.367] WbemDefPath:IUnknown:AddRef (This=0x57ac1a8) returned 0x3
	[0188.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac1a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac1a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac1a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57c16a0) returned 0x0
	[0188.367] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c16a0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.367] WbemDefPath:IUnknown:Release (This=0x57c16a0) returned 0x3
	[0188.367] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.367] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac1a8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.368] WbemDefPath:IUnknown:Release (This=0x57ac1a8) returned 0x2
	[0188.368] WbemDefPath:IUnknown:Release (This=0x57ac1a8) returned 0x1
	[0188.368] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.368] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.368] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac1a8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac1a8) returned 0x0
	[0188.368] WbemDefPath:IUnknown:AddRef (This=0x57ac1a8) returned 0x3
	[0188.368] WbemDefPath:IUnknown:Release (This=0x57ac1a8) returned 0x2
	[0188.368] WbemDefPath:IWbemPath:SetText (This=0x57ac1a8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x0
	[0188.368] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.368] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.368] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.368] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.368] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.368] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.368] IWbemClassObject:Get (in: This=0x57b7330, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fce9c*=0, plFlavor=0x29fcea0*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1c8, varVal2=0x0), pType=0x29fce9c*=19, plFlavor=0x29fcea0*=0) returned 0x0
	[0188.368] IWbemClassObject:Get (in: This=0x57b7330, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fce9c*=19, plFlavor=0x29fcea0*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1c8, varVal2=0x0), pType=0x29fce9c*=19, plFlavor=0x29fcea0*=0) returned 0x0
	[0188.369] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.369] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.369] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.369] IWbemClassObject:Get (in: This=0x57b7330, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fcf9c*=0, plFlavor=0x29fcfa0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="csrss.exe", varVal2=0x0), pType=0x29fcf9c*=8, plFlavor=0x29fcfa0*=0) returned 0x0
	[0188.369] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0188.369] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0188.369] IWbemClassObject:Get (in: This=0x57b7330, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fcf9c*=8, plFlavor=0x29fcfa0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="csrss.exe", varVal2=0x0), pType=0x29fcf9c*=8, plFlavor=0x29fcfa0*=0) returned 0x0
	[0188.369] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0188.369] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0188.370] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.370] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.370] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.370] IWbemClassObject:Get (in: This=0x57b7330, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fd0d0*=0, plFlavor=0x29fd0d4*=0 | out: pVal=0x19f2b8*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fd0d0*=8, plFlavor=0x29fd0d4*=32) returned 0x0
	[0188.372] IWbemClassObject:Get (in: This=0x57b7330, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fd0d0*=8, plFlavor=0x29fd0d4*=32 | out: pVal=0x19f2c0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fd0d0*=8, plFlavor=0x29fd0d4*=32) returned 0x0
	[0188.372] CoTaskMemAlloc (cb=0x4) returned 0x57a2e08
	[0188.372] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e08, puReturned=0x29fc548 | out: apObjects=0x57a2e08*=0x6adb58, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.374] IUnknown:QueryInterface (in: This=0x6adb58, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x6adb58) returned 0x0
	[0188.374] IUnknown:QueryInterface (in: This=0x6adb58, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.374] IUnknown:QueryInterface (in: This=0x6adb58, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.374] IUnknown:QueryInterface (in: This=0x6adb58, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.374] IUnknown:AddRef (This=0x6adb58) returned 0x3
	[0188.374] IUnknown:QueryInterface (in: This=0x6adb58, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.374] IUnknown:QueryInterface (in: This=0x6adb58, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.374] IUnknown:QueryInterface (in: This=0x6adb58, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x6adb5c) returned 0x0
	[0188.374] IMarshal:GetUnmarshalClass (in: This=0x6adb5c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.374] IUnknown:Release (This=0x6adb5c) returned 0x3
	[0188.374] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.374] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.374] IUnknown:QueryInterface (in: This=0x6adb58, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.374] IUnknown:Release (This=0x6adb58) returned 0x2
	[0188.375] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.375] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.375] IUnknown:QueryInterface (in: This=0x6adb58, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x6adb58) returned 0x0
	[0188.375] IUnknown:AddRef (This=0x6adb58) returned 0x4
	[0188.375] IUnknown:Release (This=0x6adb58) returned 0x3
	[0188.375] IUnknown:Release (This=0x6adb58) returned 0x2
	[0188.375] CoTaskMemFree (pv=0x57a2e08) 
	[0188.375] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.375] IUnknown:AddRef (This=0x6adb58) returned 0x3
	[0188.375] IWbemClassObject:Get (in: This=0x6adb58, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.375] IWbemClassObject:Get (in: This=0x6adb58, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.375] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x5c
	[0188.375] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x5c
	[0188.375] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.375] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.375] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.375] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.376] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.376] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac838) returned 0x0
	[0188.376] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0188.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac838, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac838) returned 0x0
	[0188.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac838, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac838, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.377] WbemDefPath:IUnknown:AddRef (This=0x57ac838) returned 0x3
	[0188.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac838, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac838, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac838, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57c1640) returned 0x0
	[0188.377] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c1640, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.377] WbemDefPath:IUnknown:Release (This=0x57c1640) returned 0x3
	[0188.377] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.377] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac838, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.377] WbemDefPath:IUnknown:Release (This=0x57ac838) returned 0x2
	[0188.377] WbemDefPath:IUnknown:Release (This=0x57ac838) returned 0x1
	[0188.377] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.377] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac838, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac838) returned 0x0
	[0188.377] WbemDefPath:IUnknown:AddRef (This=0x57ac838) returned 0x3
	[0188.377] WbemDefPath:IUnknown:Release (This=0x57ac838) returned 0x2
	[0188.377] WbemDefPath:IWbemPath:SetText (This=0x57ac838, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x0
	[0188.377] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.377] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.377] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.377] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.377] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.377] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.377] IWbemClassObject:Get (in: This=0x6adb58, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fd9ec*=0, plFlavor=0x29fd9f0*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1fc, varVal2=0x0), pType=0x29fd9ec*=19, plFlavor=0x29fd9f0*=0) returned 0x0
	[0188.378] IWbemClassObject:Get (in: This=0x6adb58, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fd9ec*=19, plFlavor=0x29fd9f0*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1fc, varVal2=0x0), pType=0x29fd9ec*=19, plFlavor=0x29fd9f0*=0) returned 0x0
	[0188.378] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.378] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.378] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.378] IWbemClassObject:Get (in: This=0x6adb58, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fdaec*=0, plFlavor=0x29fdaf0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winlogon.exe", varVal2=0x0), pType=0x29fdaec*=8, plFlavor=0x29fdaf0*=0) returned 0x0
	[0188.378] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0188.378] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0188.378] IWbemClassObject:Get (in: This=0x6adb58, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fdaec*=8, plFlavor=0x29fdaf0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winlogon.exe", varVal2=0x0), pType=0x29fdaec*=8, plFlavor=0x29fdaf0*=0) returned 0x0
	[0188.378] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0188.378] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0188.378] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.378] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.378] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.378] IWbemClassObject:Get (in: This=0x6adb58, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fdc30*=0, plFlavor=0x29fdc34*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winlogon.exe", varVal2=0x0), pType=0x29fdc30*=8, plFlavor=0x29fdc34*=0) returned 0x0
	[0188.378] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0188.378] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0188.378] IWbemClassObject:Get (in: This=0x6adb58, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fdc30*=8, plFlavor=0x29fdc34*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winlogon.exe", varVal2=0x0), pType=0x29fdc30*=8, plFlavor=0x29fdc34*=0) returned 0x0
	[0188.379] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0188.379] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0188.379] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.379] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x78eb70, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.379] IUnknown:QueryInterface (in: This=0x78eb70, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x78eb70) returned 0x0
	[0188.380] IUnknown:QueryInterface (in: This=0x78eb70, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.380] IUnknown:QueryInterface (in: This=0x78eb70, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.380] IUnknown:QueryInterface (in: This=0x78eb70, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.380] IUnknown:AddRef (This=0x78eb70) returned 0x3
	[0188.380] IUnknown:QueryInterface (in: This=0x78eb70, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.380] IUnknown:QueryInterface (in: This=0x78eb70, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.380] IUnknown:QueryInterface (in: This=0x78eb70, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x78eb74) returned 0x0
	[0188.380] IMarshal:GetUnmarshalClass (in: This=0x78eb74, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.380] IUnknown:Release (This=0x78eb74) returned 0x3
	[0188.380] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.380] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.380] IUnknown:QueryInterface (in: This=0x78eb70, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.380] IUnknown:Release (This=0x78eb70) returned 0x2
	[0188.380] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.380] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.380] IUnknown:QueryInterface (in: This=0x78eb70, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x78eb70) returned 0x0
	[0188.380] IUnknown:AddRef (This=0x78eb70) returned 0x4
	[0188.380] IUnknown:Release (This=0x78eb70) returned 0x3
	[0188.380] IUnknown:Release (This=0x78eb70) returned 0x2
	[0188.380] CoTaskMemFree (pv=0x57a2d58) 
	[0188.380] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.380] IUnknown:AddRef (This=0x78eb70) returned 0x3
	[0188.380] IWbemClassObject:Get (in: This=0x78eb70, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.381] IWbemClassObject:Get (in: This=0x78eb70, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"780\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.381] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"780\"") returned 0x5c
	[0188.381] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"780\"") returned 0x5c
	[0188.381] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.381] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.381] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.381] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.381] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.383] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac4b8) returned 0x0
	[0188.384] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac4b8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac4b8) returned 0x0
	[0188.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac4b8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac4b8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.384] WbemDefPath:IUnknown:AddRef (This=0x57ac4b8) returned 0x3
	[0188.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac4b8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac4b8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac4b8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57c1268) returned 0x0
	[0188.384] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c1268, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.384] WbemDefPath:IUnknown:Release (This=0x57c1268) returned 0x3
	[0188.384] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.384] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac4b8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.384] WbemDefPath:IUnknown:Release (This=0x57ac4b8) returned 0x2
	[0188.384] WbemDefPath:IUnknown:Release (This=0x57ac4b8) returned 0x1
	[0188.384] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.384] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac4b8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac4b8) returned 0x0
	[0188.385] WbemDefPath:IUnknown:AddRef (This=0x57ac4b8) returned 0x3
	[0188.385] WbemDefPath:IUnknown:Release (This=0x57ac4b8) returned 0x2
	[0188.385] WbemDefPath:IWbemPath:SetText (This=0x57ac4b8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"780\"") returned 0x0
	[0188.385] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.385] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.385] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.385] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.385] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.385] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.385] IWbemClassObject:Get (in: This=0x78eb70, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fe5a0*=0, plFlavor=0x29fe5a4*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x30c, varVal2=0x0), pType=0x29fe5a0*=19, plFlavor=0x29fe5a4*=0) returned 0x0
	[0188.385] IWbemClassObject:Get (in: This=0x78eb70, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fe5a0*=19, plFlavor=0x29fe5a4*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x30c, varVal2=0x0), pType=0x29fe5a0*=19, plFlavor=0x29fe5a4*=0) returned 0x0
	[0188.385] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.385] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.385] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.385] IWbemClassObject:Get (in: This=0x78eb70, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fe6a0*=0, plFlavor=0x29fe6a4*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dwm.exe", varVal2=0x0), pType=0x29fe6a0*=8, plFlavor=0x29fe6a4*=0) returned 0x0
	[0188.385] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0188.387] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0188.387] IWbemClassObject:Get (in: This=0x78eb70, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fe6a0*=8, plFlavor=0x29fe6a4*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dwm.exe", varVal2=0x0), pType=0x29fe6a0*=8, plFlavor=0x29fe6a4*=0) returned 0x0
	[0188.387] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0188.387] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0188.387] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.387] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.387] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.387] IWbemClassObject:Get (in: This=0x78eb70, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fe7cc*=0, plFlavor=0x29fe7d0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"dwm.exe\"", varVal2=0x0), pType=0x29fe7cc*=8, plFlavor=0x29fe7d0*=0) returned 0x0
	[0188.387] SysStringByteLen (bstr="\"dwm.exe\"") returned 0x12
	[0188.387] SysStringByteLen (bstr="\"dwm.exe\"") returned 0x12
	[0188.388] IWbemClassObject:Get (in: This=0x78eb70, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fe7cc*=8, plFlavor=0x29fe7d0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"dwm.exe\"", varVal2=0x0), pType=0x29fe7cc*=8, plFlavor=0x29fe7d0*=0) returned 0x0
	[0188.388] SysStringByteLen (bstr="\"dwm.exe\"") returned 0x12
	[0188.388] SysStringByteLen (bstr="\"dwm.exe\"") returned 0x12
	[0188.388] CoTaskMemAlloc (cb=0x4) returned 0x57a2e08
	[0188.388] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e08, puReturned=0x29fc548 | out: apObjects=0x57a2e08*=0x5825228, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.389] IUnknown:QueryInterface (in: This=0x5825228, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5825228) returned 0x0
	[0188.390] IUnknown:QueryInterface (in: This=0x5825228, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.390] IUnknown:QueryInterface (in: This=0x5825228, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.390] IUnknown:QueryInterface (in: This=0x5825228, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.390] IUnknown:AddRef (This=0x5825228) returned 0x3
	[0188.390] IUnknown:QueryInterface (in: This=0x5825228, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.390] IUnknown:QueryInterface (in: This=0x5825228, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.390] IUnknown:QueryInterface (in: This=0x5825228, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582522c) returned 0x0
	[0188.390] IMarshal:GetUnmarshalClass (in: This=0x582522c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.390] IUnknown:Release (This=0x582522c) returned 0x3
	[0188.390] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.391] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.391] IUnknown:QueryInterface (in: This=0x5825228, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.391] IUnknown:Release (This=0x5825228) returned 0x2
	[0188.391] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.391] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.391] IUnknown:QueryInterface (in: This=0x5825228, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x5825228) returned 0x0
	[0188.391] IUnknown:AddRef (This=0x5825228) returned 0x4
	[0188.391] IUnknown:Release (This=0x5825228) returned 0x3
	[0188.391] IUnknown:Release (This=0x5825228) returned 0x2
	[0188.391] CoTaskMemFree (pv=0x57a2e08) 
	[0188.391] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.392] IUnknown:AddRef (This=0x5825228) returned 0x3
	[0188.392] IWbemClassObject:Get (in: This=0x5825228, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.392] IWbemClassObject:Get (in: This=0x5825228, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1316\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.392] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1316\"") returned 0x5e
	[0188.392] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1316\"") returned 0x5e
	[0188.392] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.393] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.393] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.393] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.394] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0188.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.394] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac218) returned 0x0
	[0188.394] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0188.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac218, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac218) returned 0x0
	[0188.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac218, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac218, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.394] WbemDefPath:IUnknown:AddRef (This=0x57ac218) returned 0x3
	[0188.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac218, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac218, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac218, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57c1538) returned 0x0
	[0188.394] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57c1538, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.394] WbemDefPath:IUnknown:Release (This=0x57c1538) returned 0x3
	[0188.395] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.395] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac218, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.395] WbemDefPath:IUnknown:Release (This=0x57ac218) returned 0x2
	[0188.395] WbemDefPath:IUnknown:Release (This=0x57ac218) returned 0x1
	[0188.395] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.395] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac218, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac218) returned 0x0
	[0188.395] WbemDefPath:IUnknown:AddRef (This=0x57ac218) returned 0x3
	[0188.395] WbemDefPath:IUnknown:Release (This=0x57ac218) returned 0x2
	[0188.395] WbemDefPath:IWbemPath:SetText (This=0x57ac218, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1316\"") returned 0x0
	[0188.395] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.395] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.395] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.396] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.396] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.396] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.396] IWbemClassObject:Get (in: This=0x5825228, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ff11c*=0, plFlavor=0x29ff120*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x524, varVal2=0x0), pType=0x29ff11c*=19, plFlavor=0x29ff120*=0) returned 0x0
	[0188.396] IWbemClassObject:Get (in: This=0x5825228, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ff11c*=19, plFlavor=0x29ff120*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x524, varVal2=0x0), pType=0x29ff11c*=19, plFlavor=0x29ff120*=0) returned 0x0
	[0188.396] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.396] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.396] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.396] IWbemClassObject:Get (in: This=0x5825228, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ff220*=0, plFlavor=0x29ff224*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sihost.exe", varVal2=0x0), pType=0x29ff220*=8, plFlavor=0x29ff224*=0) returned 0x0
	[0188.396] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0188.396] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0188.396] IWbemClassObject:Get (in: This=0x5825228, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ff220*=8, plFlavor=0x29ff224*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sihost.exe", varVal2=0x0), pType=0x29ff220*=8, plFlavor=0x29ff224*=0) returned 0x0
	[0188.396] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0188.396] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0188.396] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.396] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.396] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.397] IWbemClassObject:Get (in: This=0x5825228, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ff35c*=0, plFlavor=0x29ff360*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sihost.exe", varVal2=0x0), pType=0x29ff35c*=8, plFlavor=0x29ff360*=0) returned 0x0
	[0188.397] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0188.397] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0188.397] IWbemClassObject:Get (in: This=0x5825228, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ff35c*=8, plFlavor=0x29ff360*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sihost.exe", varVal2=0x0), pType=0x29ff35c*=8, plFlavor=0x29ff360*=0) returned 0x0
	[0188.397] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0188.397] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0188.397] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.397] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5825ae8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.462] IUnknown:QueryInterface (in: This=0x5825ae8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5825ae8) returned 0x0
	[0188.462] IUnknown:QueryInterface (in: This=0x5825ae8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.462] IUnknown:QueryInterface (in: This=0x5825ae8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.462] IUnknown:QueryInterface (in: This=0x5825ae8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.462] IUnknown:AddRef (This=0x5825ae8) returned 0x3
	[0188.462] IUnknown:QueryInterface (in: This=0x5825ae8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.462] IUnknown:QueryInterface (in: This=0x5825ae8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.462] IUnknown:QueryInterface (in: This=0x5825ae8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x5825aec) returned 0x0
	[0188.462] IMarshal:GetUnmarshalClass (in: This=0x5825aec, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.462] IUnknown:Release (This=0x5825aec) returned 0x3
	[0188.462] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.463] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.463] IUnknown:QueryInterface (in: This=0x5825ae8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.463] IUnknown:Release (This=0x5825ae8) returned 0x2
	[0188.463] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.463] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.463] IUnknown:QueryInterface (in: This=0x5825ae8, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x5825ae8) returned 0x0
	[0188.463] IUnknown:AddRef (This=0x5825ae8) returned 0x4
	[0188.463] IUnknown:Release (This=0x5825ae8) returned 0x3
	[0188.463] IUnknown:Release (This=0x5825ae8) returned 0x2
	[0188.463] CoTaskMemFree (pv=0x57a2d58) 
	[0188.463] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.463] IUnknown:AddRef (This=0x5825ae8) returned 0x3
	[0188.463] IWbemClassObject:Get (in: This=0x5825ae8, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.463] IWbemClassObject:Get (in: This=0x5825ae8, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1584\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.463] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1584\"") returned 0x5e
	[0188.463] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1584\"") returned 0x5e
	[0188.464] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.464] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.464] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.464] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.465] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.465] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57acb48) returned 0x0
	[0188.465] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acb48, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57acb48) returned 0x0
	[0188.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acb48, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acb48, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.466] WbemDefPath:IUnknown:AddRef (This=0x57acb48) returned 0x3
	[0188.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acb48, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acb48, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acb48, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bbb70) returned 0x0
	[0188.466] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bbb70, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.466] WbemDefPath:IUnknown:Release (This=0x57bbb70) returned 0x3
	[0188.466] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.466] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acb48, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.466] WbemDefPath:IUnknown:Release (This=0x57acb48) returned 0x2
	[0188.466] WbemDefPath:IUnknown:Release (This=0x57acb48) returned 0x1
	[0188.466] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.466] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acb48, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57acb48) returned 0x0
	[0188.467] WbemDefPath:IUnknown:AddRef (This=0x57acb48) returned 0x3
	[0188.467] WbemDefPath:IUnknown:Release (This=0x57acb48) returned 0x2
	[0188.467] WbemDefPath:IWbemPath:SetText (This=0x57acb48, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1584\"") returned 0x0
	[0188.467] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.467] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.467] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.467] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.467] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.467] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.467] IWbemClassObject:Get (in: This=0x5825ae8, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ffcbc*=0, plFlavor=0x29ffcc0*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x630, varVal2=0x0), pType=0x29ffcbc*=19, plFlavor=0x29ffcc0*=0) returned 0x0
	[0188.467] IWbemClassObject:Get (in: This=0x5825ae8, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ffcbc*=19, plFlavor=0x29ffcc0*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x630, varVal2=0x0), pType=0x29ffcbc*=19, plFlavor=0x29ffcc0*=0) returned 0x0
	[0188.467] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.467] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.468] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.468] IWbemClassObject:Get (in: This=0x5825ae8, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ffdc0*=0, plFlavor=0x29ffdc4*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="RuntimeBroker.exe", varVal2=0x0), pType=0x29ffdc0*=8, plFlavor=0x29ffdc4*=0) returned 0x0
	[0188.468] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0188.468] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0188.468] IWbemClassObject:Get (in: This=0x5825ae8, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ffdc0*=8, plFlavor=0x29ffdc4*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="RuntimeBroker.exe", varVal2=0x0), pType=0x29ffdc0*=8, plFlavor=0x29ffdc4*=0) returned 0x0
	[0188.468] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0188.468] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0188.468] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.468] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.468] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.468] IWbemClassObject:Get (in: This=0x5825ae8, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fff14*=0, plFlavor=0x29fff18*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\RuntimeBroker.exe -Embedding", varVal2=0x0), pType=0x29fff14*=8, plFlavor=0x29fff18*=0) returned 0x0
	[0188.468] SysStringByteLen (bstr="C:\\Windows\\System32\\RuntimeBroker.exe -Embedding") returned 0x60
	[0188.469] SysStringByteLen (bstr="C:\\Windows\\System32\\RuntimeBroker.exe -Embedding") returned 0x60
	[0188.469] IWbemClassObject:Get (in: This=0x5825ae8, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29fff14*=8, plFlavor=0x29fff18*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\RuntimeBroker.exe -Embedding", varVal2=0x0), pType=0x29fff14*=8, plFlavor=0x29fff18*=0) returned 0x0
	[0188.469] SysStringByteLen (bstr="C:\\Windows\\System32\\RuntimeBroker.exe -Embedding") returned 0x60
	[0188.469] SysStringByteLen (bstr="C:\\Windows\\System32\\RuntimeBroker.exe -Embedding") returned 0x60
	[0188.469] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.469] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5825f48, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.473] IUnknown:QueryInterface (in: This=0x5825f48, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5825f48) returned 0x0
	[0188.474] IUnknown:QueryInterface (in: This=0x5825f48, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.474] IUnknown:QueryInterface (in: This=0x5825f48, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.474] IUnknown:QueryInterface (in: This=0x5825f48, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.474] IUnknown:AddRef (This=0x5825f48) returned 0x3
	[0188.474] IUnknown:QueryInterface (in: This=0x5825f48, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.474] IUnknown:QueryInterface (in: This=0x5825f48, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.474] IUnknown:QueryInterface (in: This=0x5825f48, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x5825f4c) returned 0x0
	[0188.474] IMarshal:GetUnmarshalClass (in: This=0x5825f4c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.474] IUnknown:Release (This=0x5825f4c) returned 0x3
	[0188.474] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.475] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.475] IUnknown:QueryInterface (in: This=0x5825f48, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.475] IUnknown:Release (This=0x5825f48) returned 0x2
	[0188.475] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.475] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.475] IUnknown:QueryInterface (in: This=0x5825f48, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x5825f48) returned 0x0
	[0188.475] IUnknown:AddRef (This=0x5825f48) returned 0x4
	[0188.475] IUnknown:Release (This=0x5825f48) returned 0x3
	[0188.475] IUnknown:Release (This=0x5825f48) returned 0x2
	[0188.475] CoTaskMemFree (pv=0x57a2d58) 
	[0188.475] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.475] IUnknown:AddRef (This=0x5825f48) returned 0x3
	[0188.475] IWbemClassObject:Get (in: This=0x5825f48, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.475] IWbemClassObject:Get (in: This=0x5825f48, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.475] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x5e
	[0188.475] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x5e
	[0188.476] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.476] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.476] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.476] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.477] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2cd8) returned 0x0
	[0188.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.477] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2cd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac058) returned 0x0
	[0188.477] WbemDefPath:IUnknown:Release (This=0x57a2cd8) returned 0x0
	[0188.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac058, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac058) returned 0x0
	[0188.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac058, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac058, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.477] WbemDefPath:IUnknown:AddRef (This=0x57ac058) returned 0x3
	[0188.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac058, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac058, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac058, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bbcc0) returned 0x0
	[0188.478] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bbcc0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.478] WbemDefPath:IUnknown:Release (This=0x57bbcc0) returned 0x3
	[0188.478] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.478] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac058, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.478] WbemDefPath:IUnknown:Release (This=0x57ac058) returned 0x2
	[0188.478] WbemDefPath:IUnknown:Release (This=0x57ac058) returned 0x1
	[0188.478] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.478] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac058, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac058) returned 0x0
	[0188.478] WbemDefPath:IUnknown:AddRef (This=0x57ac058) returned 0x3
	[0188.478] WbemDefPath:IUnknown:Release (This=0x57ac058) returned 0x2
	[0188.478] WbemDefPath:IWbemPath:SetText (This=0x57ac058, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x0
	[0188.478] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.478] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.478] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.479] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.479] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.479] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.479] IWbemClassObject:Get (in: This=0x5825f48, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a00994*=0, plFlavor=0x2a00998*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x664, varVal2=0x0), pType=0x2a00994*=19, plFlavor=0x2a00998*=0) returned 0x0
	[0188.479] IWbemClassObject:Get (in: This=0x5825f48, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a00994*=19, plFlavor=0x2a00998*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x664, varVal2=0x0), pType=0x2a00994*=19, plFlavor=0x2a00998*=0) returned 0x0
	[0188.479] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.479] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.479] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.479] IWbemClassObject:Get (in: This=0x5825f48, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a00a98*=0, plFlavor=0x2a00a9c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="explorer.exe", varVal2=0x0), pType=0x2a00a98*=8, plFlavor=0x2a00a9c*=0) returned 0x0
	[0188.479] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0188.479] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0188.479] IWbemClassObject:Get (in: This=0x5825f48, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a00a98*=8, plFlavor=0x2a00a9c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="explorer.exe", varVal2=0x0), pType=0x2a00a98*=8, plFlavor=0x2a00a9c*=0) returned 0x0
	[0188.479] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0188.479] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0188.480] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.480] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.480] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.480] IWbemClassObject:Get (in: This=0x5825f48, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a00bdc*=0, plFlavor=0x2a00be0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\Explorer.EXE", varVal2=0x0), pType=0x2a00bdc*=8, plFlavor=0x2a00be0*=0) returned 0x0
	[0188.480] SysStringByteLen (bstr="C:\\Windows\\Explorer.EXE") returned 0x2e
	[0188.480] SysStringByteLen (bstr="C:\\Windows\\Explorer.EXE") returned 0x2e
	[0188.480] IWbemClassObject:Get (in: This=0x5825f48, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a00bdc*=8, plFlavor=0x2a00be0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\Explorer.EXE", varVal2=0x0), pType=0x2a00bdc*=8, plFlavor=0x2a00be0*=0) returned 0x0
	[0188.480] SysStringByteLen (bstr="C:\\Windows\\Explorer.EXE") returned 0x2e
	[0188.480] SysStringByteLen (bstr="C:\\Windows\\Explorer.EXE") returned 0x2e
	[0188.480] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.480] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5793318, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.483] IUnknown:QueryInterface (in: This=0x5793318, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5793318) returned 0x0
	[0188.483] IUnknown:QueryInterface (in: This=0x5793318, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.483] IUnknown:QueryInterface (in: This=0x5793318, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.483] IUnknown:QueryInterface (in: This=0x5793318, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.483] IUnknown:AddRef (This=0x5793318) returned 0x3
	[0188.483] IUnknown:QueryInterface (in: This=0x5793318, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.483] IUnknown:QueryInterface (in: This=0x5793318, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.483] IUnknown:QueryInterface (in: This=0x5793318, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x579331c) returned 0x0
	[0188.483] IMarshal:GetUnmarshalClass (in: This=0x579331c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.483] IUnknown:Release (This=0x579331c) returned 0x3
	[0188.483] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.484] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.484] IUnknown:QueryInterface (in: This=0x5793318, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.484] IUnknown:Release (This=0x5793318) returned 0x2
	[0188.484] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.484] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.484] IUnknown:QueryInterface (in: This=0x5793318, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x5793318) returned 0x0
	[0188.484] IUnknown:AddRef (This=0x5793318) returned 0x4
	[0188.484] IUnknown:Release (This=0x5793318) returned 0x3
	[0188.484] IUnknown:Release (This=0x5793318) returned 0x2
	[0188.484] CoTaskMemFree (pv=0x57a2d58) 
	[0188.484] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.484] IUnknown:AddRef (This=0x5793318) returned 0x3
	[0188.484] IWbemClassObject:Get (in: This=0x5793318, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.484] IWbemClassObject:Get (in: This=0x5793318, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2312\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.484] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2312\"") returned 0x5e
	[0188.484] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2312\"") returned 0x5e
	[0188.485] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.485] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.485] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.485] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.486] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2cd8) returned 0x0
	[0188.486] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.486] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2cd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac0c8) returned 0x0
	[0188.486] WbemDefPath:IUnknown:Release (This=0x57a2cd8) returned 0x0
	[0188.486] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac0c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac0c8) returned 0x0
	[0188.486] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac0c8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.486] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac0c8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.487] WbemDefPath:IUnknown:AddRef (This=0x57ac0c8) returned 0x3
	[0188.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac0c8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac0c8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac0c8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bbf90) returned 0x0
	[0188.487] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bbf90, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.487] WbemDefPath:IUnknown:Release (This=0x57bbf90) returned 0x3
	[0188.487] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.487] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac0c8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.487] WbemDefPath:IUnknown:Release (This=0x57ac0c8) returned 0x2
	[0188.487] WbemDefPath:IUnknown:Release (This=0x57ac0c8) returned 0x1
	[0188.487] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.487] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac0c8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac0c8) returned 0x0
	[0188.487] WbemDefPath:IUnknown:AddRef (This=0x57ac0c8) returned 0x3
	[0188.487] WbemDefPath:IUnknown:Release (This=0x57ac0c8) returned 0x2
	[0188.487] WbemDefPath:IWbemPath:SetText (This=0x57ac0c8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2312\"") returned 0x0
	[0188.487] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.487] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.488] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.488] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.488] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.488] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.488] IWbemClassObject:Get (in: This=0x5793318, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0158c*=0, plFlavor=0x2a01590*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x908, varVal2=0x0), pType=0x2a0158c*=19, plFlavor=0x2a01590*=0) returned 0x0
	[0188.488] IWbemClassObject:Get (in: This=0x5793318, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0158c*=19, plFlavor=0x2a01590*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x908, varVal2=0x0), pType=0x2a0158c*=19, plFlavor=0x2a01590*=0) returned 0x0
	[0188.488] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.488] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.488] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.488] IWbemClassObject:Get (in: This=0x5793318, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a01690*=0, plFlavor=0x2a01694*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="taskhostw.exe", varVal2=0x0), pType=0x2a01690*=8, plFlavor=0x2a01694*=0) returned 0x0
	[0188.488] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0188.489] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0188.489] IWbemClassObject:Get (in: This=0x5793318, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a01690*=8, plFlavor=0x2a01694*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="taskhostw.exe", varVal2=0x0), pType=0x2a01690*=8, plFlavor=0x2a01694*=0) returned 0x0
	[0188.489] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0188.489] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0188.489] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.489] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.489] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.489] IWbemClassObject:Get (in: This=0x5793318, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a017d4*=0, plFlavor=0x2a017d8*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}", varVal2=0x0), pType=0x2a017d4*=8, plFlavor=0x2a017d8*=0) returned 0x0
	[0188.489] SysStringByteLen (bstr="taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}") returned 0x68
	[0188.489] SysStringByteLen (bstr="taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}") returned 0x68
	[0188.489] IWbemClassObject:Get (in: This=0x5793318, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a017d4*=8, plFlavor=0x2a017d8*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}", varVal2=0x0), pType=0x2a017d4*=8, plFlavor=0x2a017d8*=0) returned 0x0
	[0188.489] SysStringByteLen (bstr="taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}") returned 0x68
	[0188.489] SysStringByteLen (bstr="taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}") returned 0x68
	[0188.489] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.490] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x5793c70, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.495] IUnknown:QueryInterface (in: This=0x5793c70, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5793c70) returned 0x0
	[0188.495] IUnknown:QueryInterface (in: This=0x5793c70, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.495] IUnknown:QueryInterface (in: This=0x5793c70, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.495] IUnknown:QueryInterface (in: This=0x5793c70, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.495] IUnknown:AddRef (This=0x5793c70) returned 0x3
	[0188.495] IUnknown:QueryInterface (in: This=0x5793c70, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.495] IUnknown:QueryInterface (in: This=0x5793c70, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.495] IUnknown:QueryInterface (in: This=0x5793c70, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x5793c74) returned 0x0
	[0188.496] IMarshal:GetUnmarshalClass (in: This=0x5793c74, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.496] IUnknown:Release (This=0x5793c74) returned 0x3
	[0188.496] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.496] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.496] IUnknown:QueryInterface (in: This=0x5793c70, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.496] IUnknown:Release (This=0x5793c70) returned 0x2
	[0188.496] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.496] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.496] IUnknown:QueryInterface (in: This=0x5793c70, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x5793c70) returned 0x0
	[0188.496] IUnknown:AddRef (This=0x5793c70) returned 0x4
	[0188.496] IUnknown:Release (This=0x5793c70) returned 0x3
	[0188.496] IUnknown:Release (This=0x5793c70) returned 0x2
	[0188.496] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.496] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.496] IUnknown:AddRef (This=0x5793c70) returned 0x3
	[0188.496] IWbemClassObject:Get (in: This=0x5793c70, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.545] IWbemClassObject:Get (in: This=0x5793c70, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2528\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.545] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2528\"") returned 0x5e
	[0188.545] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2528\"") returned 0x5e
	[0188.545] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.546] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.546] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.546] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.547] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.547] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.547] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac528) returned 0x0
	[0188.547] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.547] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac528, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac528) returned 0x0
	[0188.547] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac528, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.547] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac528, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.547] WbemDefPath:IUnknown:AddRef (This=0x57ac528) returned 0x3
	[0188.547] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac528, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.547] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac528, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.547] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac528, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bbea0) returned 0x0
	[0188.548] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bbea0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.548] WbemDefPath:IUnknown:Release (This=0x57bbea0) returned 0x3
	[0188.548] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.548] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.548] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac528, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.548] WbemDefPath:IUnknown:Release (This=0x57ac528) returned 0x2
	[0188.548] WbemDefPath:IUnknown:Release (This=0x57ac528) returned 0x1
	[0188.548] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.548] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.548] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac528, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac528) returned 0x0
	[0188.548] WbemDefPath:IUnknown:AddRef (This=0x57ac528) returned 0x3
	[0188.548] WbemDefPath:IUnknown:Release (This=0x57ac528) returned 0x2
	[0188.548] WbemDefPath:IWbemPath:SetText (This=0x57ac528, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2528\"") returned 0x0
	[0188.548] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.549] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.549] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.549] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.549] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.549] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.549] IWbemClassObject:Get (in: This=0x5793c70, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a02238*=0, plFlavor=0x2a0223c*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9e0, varVal2=0x0), pType=0x2a02238*=19, plFlavor=0x2a0223c*=0) returned 0x0
	[0188.550] IWbemClassObject:Get (in: This=0x5793c70, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a02238*=19, plFlavor=0x2a0223c*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9e0, varVal2=0x0), pType=0x2a02238*=19, plFlavor=0x2a0223c*=0) returned 0x0
	[0188.550] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.550] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.550] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.550] IWbemClassObject:Get (in: This=0x5793c70, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0233c*=0, plFlavor=0x2a02340*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SkypeHost.exe", varVal2=0x0), pType=0x2a0233c*=8, plFlavor=0x2a02340*=0) returned 0x0
	[0188.550] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0188.550] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0188.550] IWbemClassObject:Get (in: This=0x5793c70, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0233c*=8, plFlavor=0x2a02340*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SkypeHost.exe", varVal2=0x0), pType=0x2a0233c*=8, plFlavor=0x2a02340*=0) returned 0x0
	[0188.550] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0188.550] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0188.550] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.550] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.550] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.551] IWbemClassObject:Get (in: This=0x5793c70, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a02480*=0, plFlavor=0x2a02484*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe\" -ServerName:SkypeHost.ServerServer", varVal2=0x0), pType=0x2a02480*=8, plFlavor=0x2a02484*=0) returned 0x0
	[0188.551] SysStringByteLen (bstr="\"C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe\" -ServerName:SkypeHost.ServerServer") returned 0x106
	[0188.551] SysStringByteLen (bstr="\"C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe\" -ServerName:SkypeHost.ServerServer") returned 0x106
	[0188.551] IWbemClassObject:Get (in: This=0x5793c70, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a02480*=8, plFlavor=0x2a02484*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe\" -ServerName:SkypeHost.ServerServer", varVal2=0x0), pType=0x2a02480*=8, plFlavor=0x2a02484*=0) returned 0x0
	[0188.551] SysStringByteLen (bstr="\"C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe\" -ServerName:SkypeHost.ServerServer") returned 0x106
	[0188.551] SysStringByteLen (bstr="\"C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe\" -ServerName:SkypeHost.ServerServer") returned 0x106
	[0188.551] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.551] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x5793e08, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.554] IUnknown:QueryInterface (in: This=0x5793e08, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5793e08) returned 0x0
	[0188.554] IUnknown:QueryInterface (in: This=0x5793e08, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.554] IUnknown:QueryInterface (in: This=0x5793e08, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.554] IUnknown:QueryInterface (in: This=0x5793e08, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.554] IUnknown:AddRef (This=0x5793e08) returned 0x3
	[0188.554] IUnknown:QueryInterface (in: This=0x5793e08, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.554] IUnknown:QueryInterface (in: This=0x5793e08, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.554] IUnknown:QueryInterface (in: This=0x5793e08, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x5793e0c) returned 0x0
	[0188.555] IMarshal:GetUnmarshalClass (in: This=0x5793e0c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.555] IUnknown:Release (This=0x5793e0c) returned 0x3
	[0188.555] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.555] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.555] IUnknown:QueryInterface (in: This=0x5793e08, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.555] IUnknown:Release (This=0x5793e08) returned 0x2
	[0188.555] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.555] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.555] IUnknown:QueryInterface (in: This=0x5793e08, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x5793e08) returned 0x0
	[0188.555] IUnknown:AddRef (This=0x5793e08) returned 0x4
	[0188.555] IUnknown:Release (This=0x5793e08) returned 0x3
	[0188.555] IUnknown:Release (This=0x5793e08) returned 0x2
	[0188.555] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.555] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.555] IUnknown:AddRef (This=0x5793e08) returned 0x3
	[0188.555] IWbemClassObject:Get (in: This=0x5793e08, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.556] IWbemClassObject:Get (in: This=0x5793e08, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2660\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.556] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2660\"") returned 0x5e
	[0188.556] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2660\"") returned 0x5e
	[0188.556] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.556] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.556] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.556] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.557] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e08) returned 0x0
	[0188.557] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e08, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.557] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e08, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac448) returned 0x0
	[0188.557] WbemDefPath:IUnknown:Release (This=0x57a2e08) returned 0x0
	[0188.557] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac448, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac448) returned 0x0
	[0188.557] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac448, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.557] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac448, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.557] WbemDefPath:IUnknown:AddRef (This=0x57ac448) returned 0x3
	[0188.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac448, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac448, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac448, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bc2a8) returned 0x0
	[0188.558] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bc2a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.558] WbemDefPath:IUnknown:Release (This=0x57bc2a8) returned 0x3
	[0188.558] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.558] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac448, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.558] WbemDefPath:IUnknown:Release (This=0x57ac448) returned 0x2
	[0188.558] WbemDefPath:IUnknown:Release (This=0x57ac448) returned 0x1
	[0188.558] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.558] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac448, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac448) returned 0x0
	[0188.558] WbemDefPath:IUnknown:AddRef (This=0x57ac448) returned 0x3
	[0188.558] WbemDefPath:IUnknown:Release (This=0x57ac448) returned 0x2
	[0188.558] WbemDefPath:IWbemPath:SetText (This=0x57ac448, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2660\"") returned 0x0
	[0188.559] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.559] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.559] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.560] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.560] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.560] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.560] IWbemClassObject:Get (in: This=0x5793e08, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a030b8*=0, plFlavor=0x2a030bc*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xa64, varVal2=0x0), pType=0x2a030b8*=19, plFlavor=0x2a030bc*=0) returned 0x0
	[0188.560] IWbemClassObject:Get (in: This=0x5793e08, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a030b8*=19, plFlavor=0x2a030bc*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xa64, varVal2=0x0), pType=0x2a030b8*=19, plFlavor=0x2a030bc*=0) returned 0x0
	[0188.560] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.560] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.560] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.560] IWbemClassObject:Get (in: This=0x5793e08, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a031bc*=0, plFlavor=0x2a031c0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ShellExperienceHost.exe", varVal2=0x0), pType=0x2a031bc*=8, plFlavor=0x2a031c0*=0) returned 0x0
	[0188.561] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0188.561] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0188.561] IWbemClassObject:Get (in: This=0x5793e08, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a031bc*=8, plFlavor=0x2a031c0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ShellExperienceHost.exe", varVal2=0x0), pType=0x2a031bc*=8, plFlavor=0x2a031c0*=0) returned 0x0
	[0188.561] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0188.561] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0188.561] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.561] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.561] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.561] IWbemClassObject:Get (in: This=0x5793e08, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a03328*=0, plFlavor=0x2a0332c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca", varVal2=0x0), pType=0x2a03328*=8, plFlavor=0x2a0332c*=0) returned 0x0
	[0188.561] SysStringByteLen (bstr="\"C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca") returned 0x114
	[0188.561] SysStringByteLen (bstr="\"C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca") returned 0x114
	[0188.561] IWbemClassObject:Get (in: This=0x5793e08, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a03328*=8, plFlavor=0x2a0332c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca", varVal2=0x0), pType=0x2a03328*=8, plFlavor=0x2a0332c*=0) returned 0x0
	[0188.561] SysStringByteLen (bstr="\"C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca") returned 0x114
	[0188.561] SysStringByteLen (bstr="\"C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca") returned 0x114
	[0188.562] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.562] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x5830000, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.563] IUnknown:QueryInterface (in: This=0x5830000, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5830000) returned 0x0
	[0188.563] IUnknown:QueryInterface (in: This=0x5830000, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.563] IUnknown:QueryInterface (in: This=0x5830000, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.563] IUnknown:QueryInterface (in: This=0x5830000, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.563] IUnknown:AddRef (This=0x5830000) returned 0x3
	[0188.563] IUnknown:QueryInterface (in: This=0x5830000, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.563] IUnknown:QueryInterface (in: This=0x5830000, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.564] IUnknown:QueryInterface (in: This=0x5830000, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x5830004) returned 0x0
	[0188.564] IMarshal:GetUnmarshalClass (in: This=0x5830004, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.564] IUnknown:Release (This=0x5830004) returned 0x3
	[0188.564] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.564] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.564] IUnknown:QueryInterface (in: This=0x5830000, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.564] IUnknown:Release (This=0x5830000) returned 0x2
	[0188.564] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.564] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.564] IUnknown:QueryInterface (in: This=0x5830000, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x5830000) returned 0x0
	[0188.564] IUnknown:AddRef (This=0x5830000) returned 0x4
	[0188.564] IUnknown:Release (This=0x5830000) returned 0x3
	[0188.564] IUnknown:Release (This=0x5830000) returned 0x2
	[0188.564] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.564] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.564] IUnknown:AddRef (This=0x5830000) returned 0x3
	[0188.564] IWbemClassObject:Get (in: This=0x5830000, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.565] IWbemClassObject:Get (in: This=0x5830000, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2768\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.565] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2768\"") returned 0x5e
	[0188.565] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2768\"") returned 0x5e
	[0188.565] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.565] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.565] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.565] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.566] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.566] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.566] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac598) returned 0x0
	[0188.566] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0188.566] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac598, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac598) returned 0x0
	[0188.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac598, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac598, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.567] WbemDefPath:IUnknown:AddRef (This=0x57ac598) returned 0x3
	[0188.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac598, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac598, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac598, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bc440) returned 0x0
	[0188.567] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bc440, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.567] WbemDefPath:IUnknown:Release (This=0x57bc440) returned 0x3
	[0188.567] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.567] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac598, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.567] WbemDefPath:IUnknown:Release (This=0x57ac598) returned 0x2
	[0188.567] WbemDefPath:IUnknown:Release (This=0x57ac598) returned 0x1
	[0188.567] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.567] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac598, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac598) returned 0x0
	[0188.568] WbemDefPath:IUnknown:AddRef (This=0x57ac598) returned 0x3
	[0188.568] WbemDefPath:IUnknown:Release (This=0x57ac598) returned 0x2
	[0188.568] WbemDefPath:IWbemPath:SetText (This=0x57ac598, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2768\"") returned 0x0
	[0188.568] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.568] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.568] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.568] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.568] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.568] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.568] IWbemClassObject:Get (in: This=0x5830000, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a03ff0*=0, plFlavor=0x2a03ff4*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xad0, varVal2=0x0), pType=0x2a03ff0*=19, plFlavor=0x2a03ff4*=0) returned 0x0
	[0188.568] IWbemClassObject:Get (in: This=0x5830000, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a03ff0*=19, plFlavor=0x2a03ff4*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xad0, varVal2=0x0), pType=0x2a03ff0*=19, plFlavor=0x2a03ff4*=0) returned 0x0
	[0188.569] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.569] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.569] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.569] IWbemClassObject:Get (in: This=0x5830000, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a040f4*=0, plFlavor=0x2a040f8*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SearchUI.exe", varVal2=0x0), pType=0x2a040f4*=8, plFlavor=0x2a040f8*=0) returned 0x0
	[0188.569] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0188.569] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0188.569] IWbemClassObject:Get (in: This=0x5830000, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a040f4*=8, plFlavor=0x2a040f8*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SearchUI.exe", varVal2=0x0), pType=0x2a040f4*=8, plFlavor=0x2a040f8*=0) returned 0x0
	[0188.569] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0188.569] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0188.569] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.569] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.569] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.569] IWbemClassObject:Get (in: This=0x5830000, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a04238*=0, plFlavor=0x2a0423c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca", varVal2=0x0), pType=0x2a04238*=8, plFlavor=0x2a0423c*=0) returned 0x0
	[0188.569] SysStringByteLen (bstr="\"C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca") returned 0x116
	[0188.569] SysStringByteLen (bstr="\"C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca") returned 0x116
	[0188.570] IWbemClassObject:Get (in: This=0x5830000, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a04238*=8, plFlavor=0x2a0423c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca", varVal2=0x0), pType=0x2a04238*=8, plFlavor=0x2a0423c*=0) returned 0x0
	[0188.570] SysStringByteLen (bstr="\"C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca") returned 0x116
	[0188.570] SysStringByteLen (bstr="\"C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca") returned 0x116
	[0188.570] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.570] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5839648, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.572] IUnknown:QueryInterface (in: This=0x5839648, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5839648) returned 0x0
	[0188.572] IUnknown:QueryInterface (in: This=0x5839648, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.572] IUnknown:QueryInterface (in: This=0x5839648, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.572] IUnknown:QueryInterface (in: This=0x5839648, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.572] IUnknown:AddRef (This=0x5839648) returned 0x3
	[0188.572] IUnknown:QueryInterface (in: This=0x5839648, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.572] IUnknown:QueryInterface (in: This=0x5839648, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.573] IUnknown:QueryInterface (in: This=0x5839648, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x583964c) returned 0x0
	[0188.573] IMarshal:GetUnmarshalClass (in: This=0x583964c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.573] IUnknown:Release (This=0x583964c) returned 0x3
	[0188.573] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.573] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.573] IUnknown:QueryInterface (in: This=0x5839648, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.573] IUnknown:Release (This=0x5839648) returned 0x2
	[0188.573] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.573] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.573] IUnknown:QueryInterface (in: This=0x5839648, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x5839648) returned 0x0
	[0188.573] IUnknown:AddRef (This=0x5839648) returned 0x4
	[0188.573] IUnknown:Release (This=0x5839648) returned 0x3
	[0188.573] IUnknown:Release (This=0x5839648) returned 0x2
	[0188.573] CoTaskMemFree (pv=0x57a2d58) 
	[0188.573] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.573] IUnknown:AddRef (This=0x5839648) returned 0x3
	[0188.573] IWbemClassObject:Get (in: This=0x5839648, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.574] IWbemClassObject:Get (in: This=0x5839648, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3352\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.574] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3352\"") returned 0x5e
	[0188.574] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3352\"") returned 0x5e
	[0188.581] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.582] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.582] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.582] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.583] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.583] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac138) returned 0x0
	[0188.583] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac138, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac138) returned 0x0
	[0188.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac138, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac138, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.583] WbemDefPath:IUnknown:AddRef (This=0x57ac138) returned 0x3
	[0188.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac138, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac138, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac138, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bb600) returned 0x0
	[0188.584] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bb600, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.584] WbemDefPath:IUnknown:Release (This=0x57bb600) returned 0x3
	[0188.584] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.584] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac138, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.584] WbemDefPath:IUnknown:Release (This=0x57ac138) returned 0x2
	[0188.584] WbemDefPath:IUnknown:Release (This=0x57ac138) returned 0x1
	[0188.584] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.584] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac138, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac138) returned 0x0
	[0188.584] WbemDefPath:IUnknown:AddRef (This=0x57ac138) returned 0x3
	[0188.584] WbemDefPath:IUnknown:Release (This=0x57ac138) returned 0x2
	[0188.584] WbemDefPath:IWbemPath:SetText (This=0x57ac138, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3352\"") returned 0x0
	[0188.584] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.584] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.584] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.585] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.585] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.585] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.585] IWbemClassObject:Get (in: This=0x5839648, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a04ea0*=0, plFlavor=0x2a04ea4*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xd18, varVal2=0x0), pType=0x2a04ea0*=19, plFlavor=0x2a04ea4*=0) returned 0x0
	[0188.585] IWbemClassObject:Get (in: This=0x5839648, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a04ea0*=19, plFlavor=0x2a04ea4*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xd18, varVal2=0x0), pType=0x2a04ea0*=19, plFlavor=0x2a04ea4*=0) returned 0x0
	[0188.585] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.585] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.585] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.585] IWbemClassObject:Get (in: This=0x5839648, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a04fa4*=0, plFlavor=0x2a04fa8*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="svchost.exe", varVal2=0x0), pType=0x2a04fa4*=8, plFlavor=0x2a04fa8*=0) returned 0x0
	[0188.585] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0188.585] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0188.585] IWbemClassObject:Get (in: This=0x5839648, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a04fa4*=8, plFlavor=0x2a04fa8*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="svchost.exe", varVal2=0x0), pType=0x2a04fa4*=8, plFlavor=0x2a04fa8*=0) returned 0x0
	[0188.585] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0188.586] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0188.586] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.586] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.586] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.586] IWbemClassObject:Get (in: This=0x5839648, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a050e0*=0, plFlavor=0x2a050e4*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\svchost.exe -k UnistackSvcGroup", varVal2=0x0), pType=0x2a050e0*=8, plFlavor=0x2a050e4*=0) returned 0x0
	[0188.586] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe -k UnistackSvcGroup") returned 0x66
	[0188.586] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe -k UnistackSvcGroup") returned 0x66
	[0188.586] IWbemClassObject:Get (in: This=0x5839648, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a050e0*=8, plFlavor=0x2a050e4*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\svchost.exe -k UnistackSvcGroup", varVal2=0x0), pType=0x2a050e0*=8, plFlavor=0x2a050e4*=0) returned 0x0
	[0188.586] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe -k UnistackSvcGroup") returned 0x66
	[0188.586] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe -k UnistackSvcGroup") returned 0x66
	[0188.586] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.586] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x5830198, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.587] IUnknown:QueryInterface (in: This=0x5830198, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5830198) returned 0x0
	[0188.588] IUnknown:QueryInterface (in: This=0x5830198, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.588] IUnknown:QueryInterface (in: This=0x5830198, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.588] IUnknown:QueryInterface (in: This=0x5830198, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.588] IUnknown:AddRef (This=0x5830198) returned 0x3
	[0188.588] IUnknown:QueryInterface (in: This=0x5830198, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.588] IUnknown:QueryInterface (in: This=0x5830198, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.588] IUnknown:QueryInterface (in: This=0x5830198, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x583019c) returned 0x0
	[0188.588] IMarshal:GetUnmarshalClass (in: This=0x583019c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.588] IUnknown:Release (This=0x583019c) returned 0x3
	[0188.588] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.588] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.588] IUnknown:QueryInterface (in: This=0x5830198, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.589] IUnknown:Release (This=0x5830198) returned 0x2
	[0188.589] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.589] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.589] IUnknown:QueryInterface (in: This=0x5830198, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x5830198) returned 0x0
	[0188.589] IUnknown:AddRef (This=0x5830198) returned 0x4
	[0188.589] IUnknown:Release (This=0x5830198) returned 0x3
	[0188.589] IUnknown:Release (This=0x5830198) returned 0x2
	[0188.589] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.589] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.589] IUnknown:AddRef (This=0x5830198) returned 0x3
	[0188.589] IWbemClassObject:Get (in: This=0x5830198, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.589] IWbemClassObject:Get (in: This=0x5830198, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2216\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.589] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2216\"") returned 0x5e
	[0188.589] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2216\"") returned 0x5e
	[0188.589] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.589] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.590] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.590] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.590] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.591] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac368) returned 0x0
	[0188.591] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0188.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac368, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac368) returned 0x0
	[0188.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac368, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac368, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.591] WbemDefPath:IUnknown:AddRef (This=0x57ac368) returned 0x3
	[0188.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac368, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac368, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac368, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bb570) returned 0x0
	[0188.591] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bb570, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.591] WbemDefPath:IUnknown:Release (This=0x57bb570) returned 0x3
	[0188.592] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.592] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.592] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac368, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.592] WbemDefPath:IUnknown:Release (This=0x57ac368) returned 0x2
	[0188.592] WbemDefPath:IUnknown:Release (This=0x57ac368) returned 0x1
	[0188.592] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.592] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.592] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac368, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac368) returned 0x0
	[0188.592] WbemDefPath:IUnknown:AddRef (This=0x57ac368) returned 0x3
	[0188.592] WbemDefPath:IUnknown:Release (This=0x57ac368) returned 0x2
	[0188.592] WbemDefPath:IWbemPath:SetText (This=0x57ac368, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2216\"") returned 0x0
	[0188.592] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.592] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.592] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.592] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.592] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.592] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.592] IWbemClassObject:Get (in: This=0x5830198, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a05b34*=0, plFlavor=0x2a05b38*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8a8, varVal2=0x0), pType=0x2a05b34*=19, plFlavor=0x2a05b38*=0) returned 0x0
	[0188.593] IWbemClassObject:Get (in: This=0x5830198, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a05b34*=19, plFlavor=0x2a05b38*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8a8, varVal2=0x0), pType=0x2a05b34*=19, plFlavor=0x2a05b38*=0) returned 0x0
	[0188.593] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.593] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.593] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.593] IWbemClassObject:Get (in: This=0x5830198, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a05c38*=0, plFlavor=0x2a05c3c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="iexplore.exe", varVal2=0x0), pType=0x2a05c38*=8, plFlavor=0x2a05c3c*=0) returned 0x0
	[0188.593] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0188.593] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0188.593] IWbemClassObject:Get (in: This=0x5830198, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a05c38*=8, plFlavor=0x2a05c3c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="iexplore.exe", varVal2=0x0), pType=0x2a05c38*=8, plFlavor=0x2a05c3c*=0) returned 0x0
	[0188.593] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0188.593] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0188.593] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.593] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.593] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.594] IWbemClassObject:Get (in: This=0x5830198, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a05d7c*=0, plFlavor=0x2a05d80*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" about:blank", varVal2=0x0), pType=0x2a05d7c*=8, plFlavor=0x2a05d80*=0) returned 0x0
	[0188.594] SysStringByteLen (bstr="\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" about:blank") returned 0x7a
	[0188.594] SysStringByteLen (bstr="\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" about:blank") returned 0x7a
	[0188.594] IWbemClassObject:Get (in: This=0x5830198, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a05d7c*=8, plFlavor=0x2a05d80*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" about:blank", varVal2=0x0), pType=0x2a05d7c*=8, plFlavor=0x2a05d80*=0) returned 0x0
	[0188.594] SysStringByteLen (bstr="\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" about:blank") returned 0x7a
	[0188.594] SysStringByteLen (bstr="\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" about:blank") returned 0x7a
	[0188.594] CoTaskMemAlloc (cb=0x4) returned 0x57a2de8
	[0188.594] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2de8, puReturned=0x29fc548 | out: apObjects=0x57a2de8*=0x583a2a8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.595] IUnknown:QueryInterface (in: This=0x583a2a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x583a2a8) returned 0x0
	[0188.595] IUnknown:QueryInterface (in: This=0x583a2a8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.595] IUnknown:QueryInterface (in: This=0x583a2a8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.595] IUnknown:QueryInterface (in: This=0x583a2a8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.596] IUnknown:AddRef (This=0x583a2a8) returned 0x3
	[0188.596] IUnknown:QueryInterface (in: This=0x583a2a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.596] IUnknown:QueryInterface (in: This=0x583a2a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.596] IUnknown:QueryInterface (in: This=0x583a2a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x583a2ac) returned 0x0
	[0188.596] IMarshal:GetUnmarshalClass (in: This=0x583a2ac, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.596] IUnknown:Release (This=0x583a2ac) returned 0x3
	[0188.596] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.596] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.596] IUnknown:QueryInterface (in: This=0x583a2a8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.596] IUnknown:Release (This=0x583a2a8) returned 0x2
	[0188.596] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.596] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.596] IUnknown:QueryInterface (in: This=0x583a2a8, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x583a2a8) returned 0x0
	[0188.596] IUnknown:AddRef (This=0x583a2a8) returned 0x4
	[0188.596] IUnknown:Release (This=0x583a2a8) returned 0x3
	[0188.596] IUnknown:Release (This=0x583a2a8) returned 0x2
	[0188.596] CoTaskMemFree (pv=0x57a2de8) 
	[0188.596] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.596] IUnknown:AddRef (This=0x583a2a8) returned 0x3
	[0188.596] IWbemClassObject:Get (in: This=0x583a2a8, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.596] IWbemClassObject:Get (in: This=0x583a2a8, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.597] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"") returned 0x5c
	[0188.597] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"") returned 0x5c
	[0188.597] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.597] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.597] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.597] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.598] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.598] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac608) returned 0x0
	[0188.598] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac608, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac608) returned 0x0
	[0188.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac608, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac608, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.599] WbemDefPath:IUnknown:AddRef (This=0x57ac608) returned 0x3
	[0188.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac608, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac608, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac608, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bb990) returned 0x0
	[0188.599] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bb990, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.599] WbemDefPath:IUnknown:Release (This=0x57bb990) returned 0x3
	[0188.599] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.599] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac608, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.599] WbemDefPath:IUnknown:Release (This=0x57ac608) returned 0x2
	[0188.599] WbemDefPath:IUnknown:Release (This=0x57ac608) returned 0x1
	[0188.599] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.599] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac608, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac608) returned 0x0
	[0188.599] WbemDefPath:IUnknown:AddRef (This=0x57ac608) returned 0x3
	[0188.599] WbemDefPath:IUnknown:Release (This=0x57ac608) returned 0x2
	[0188.599] WbemDefPath:IWbemPath:SetText (This=0x57ac608, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"") returned 0x0
	[0188.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.600] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.600] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.600] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.600] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.600] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.600] IWbemClassObject:Get (in: This=0x583a2a8, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a06810*=0, plFlavor=0x2a06814*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xb0, varVal2=0x0), pType=0x2a06810*=19, plFlavor=0x2a06814*=0) returned 0x0
	[0188.600] IWbemClassObject:Get (in: This=0x583a2a8, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a06810*=19, plFlavor=0x2a06814*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xb0, varVal2=0x0), pType=0x2a06810*=19, plFlavor=0x2a06814*=0) returned 0x0
	[0188.600] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.600] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.600] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.600] IWbemClassObject:Get (in: This=0x583a2a8, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a06910*=0, plFlavor=0x2a06914*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="prepareimportantspend.exe", varVal2=0x0), pType=0x2a06910*=8, plFlavor=0x2a06914*=0) returned 0x0
	[0188.600] SysStringByteLen (bstr="prepareimportantspend.exe") returned 0x32
	[0188.601] SysStringByteLen (bstr="prepareimportantspend.exe") returned 0x32
	[0188.601] IWbemClassObject:Get (in: This=0x583a2a8, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a06910*=8, plFlavor=0x2a06914*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="prepareimportantspend.exe", varVal2=0x0), pType=0x2a06910*=8, plFlavor=0x2a06914*=0) returned 0x0
	[0188.601] SysStringByteLen (bstr="prepareimportantspend.exe") returned 0x32
	[0188.641] SysStringByteLen (bstr="prepareimportantspend.exe") returned 0x32
	[0188.641] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.641] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.641] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.642] IWbemClassObject:Get (in: This=0x583a2a8, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a06a84*=0, plFlavor=0x2a06a88*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows Sidebar\\prepareimportantspend.exe\" ", varVal2=0x0), pType=0x2a06a84*=8, plFlavor=0x2a06a88*=0) returned 0x0
	[0188.642] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Sidebar\\prepareimportantspend.exe\" ") returned 0x86
	[0188.642] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Sidebar\\prepareimportantspend.exe\" ") returned 0x86
	[0188.642] IWbemClassObject:Get (in: This=0x583a2a8, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a06a84*=8, plFlavor=0x2a06a88*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows Sidebar\\prepareimportantspend.exe\" ", varVal2=0x0), pType=0x2a06a84*=8, plFlavor=0x2a06a88*=0) returned 0x0
	[0188.642] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Sidebar\\prepareimportantspend.exe\" ") returned 0x86
	[0188.642] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Sidebar\\prepareimportantspend.exe\" ") returned 0x86
	[0188.642] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.642] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x583a730, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.645] IUnknown:QueryInterface (in: This=0x583a730, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x583a730) returned 0x0
	[0188.645] IUnknown:QueryInterface (in: This=0x583a730, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.645] IUnknown:QueryInterface (in: This=0x583a730, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.645] IUnknown:QueryInterface (in: This=0x583a730, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.645] IUnknown:AddRef (This=0x583a730) returned 0x3
	[0188.645] IUnknown:QueryInterface (in: This=0x583a730, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.645] IUnknown:QueryInterface (in: This=0x583a730, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.645] IUnknown:QueryInterface (in: This=0x583a730, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x583a734) returned 0x0
	[0188.645] IMarshal:GetUnmarshalClass (in: This=0x583a734, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.645] IUnknown:Release (This=0x583a734) returned 0x3
	[0188.645] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.645] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.645] IUnknown:QueryInterface (in: This=0x583a730, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.646] IUnknown:Release (This=0x583a730) returned 0x2
	[0188.646] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.646] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.646] IUnknown:QueryInterface (in: This=0x583a730, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x583a730) returned 0x0
	[0188.646] IUnknown:AddRef (This=0x583a730) returned 0x4
	[0188.646] IUnknown:Release (This=0x583a730) returned 0x3
	[0188.646] IUnknown:Release (This=0x583a730) returned 0x2
	[0188.646] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.646] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.646] IUnknown:AddRef (This=0x583a730) returned 0x3
	[0188.646] IWbemClassObject:Get (in: This=0x583a730, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.646] IWbemClassObject:Get (in: This=0x583a730, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2220\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.646] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2220\"") returned 0x5e
	[0188.646] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2220\"") returned 0x5e
	[0188.646] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.646] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.646] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.646] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.647] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0188.648] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.648] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac2f8) returned 0x0
	[0188.648] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0188.648] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac2f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac2f8) returned 0x0
	[0188.648] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac2f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.648] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac2f8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.648] WbemDefPath:IUnknown:AddRef (This=0x57ac2f8) returned 0x3
	[0188.648] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac2f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.648] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac2f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.648] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac2f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x57bb978) returned 0x0
	[0188.648] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x57bb978, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.648] WbemDefPath:IUnknown:Release (This=0x57bb978) returned 0x3
	[0188.648] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.648] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.649] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac2f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.649] WbemDefPath:IUnknown:Release (This=0x57ac2f8) returned 0x2
	[0188.649] WbemDefPath:IUnknown:Release (This=0x57ac2f8) returned 0x1
	[0188.649] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.649] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.649] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac2f8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac2f8) returned 0x0
	[0188.649] WbemDefPath:IUnknown:AddRef (This=0x57ac2f8) returned 0x3
	[0188.649] WbemDefPath:IUnknown:Release (This=0x57ac2f8) returned 0x2
	[0188.649] WbemDefPath:IWbemPath:SetText (This=0x57ac2f8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2220\"") returned 0x0
	[0188.649] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.649] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.649] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.649] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.650] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.650] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.650] IWbemClassObject:Get (in: This=0x583a730, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a07554*=0, plFlavor=0x2a07558*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8ac, varVal2=0x0), pType=0x2a07554*=19, plFlavor=0x2a07558*=0) returned 0x0
	[0188.650] IWbemClassObject:Get (in: This=0x583a730, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a07554*=19, plFlavor=0x2a07558*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8ac, varVal2=0x0), pType=0x2a07554*=19, plFlavor=0x2a07558*=0) returned 0x0
	[0188.650] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.650] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.650] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.650] IWbemClassObject:Get (in: This=0x583a730, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a07658*=0, plFlavor=0x2a0765c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="currentbad.exe", varVal2=0x0), pType=0x2a07658*=8, plFlavor=0x2a0765c*=0) returned 0x0
	[0188.651] SysStringByteLen (bstr="currentbad.exe") returned 0x1c
	[0188.651] SysStringByteLen (bstr="currentbad.exe") returned 0x1c
	[0188.651] IWbemClassObject:Get (in: This=0x583a730, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a07658*=8, plFlavor=0x2a0765c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="currentbad.exe", varVal2=0x0), pType=0x2a07658*=8, plFlavor=0x2a0765c*=0) returned 0x0
	[0188.651] SysStringByteLen (bstr="currentbad.exe") returned 0x1c
	[0188.651] SysStringByteLen (bstr="currentbad.exe") returned 0x1c
	[0188.651] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.651] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.651] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.651] IWbemClassObject:Get (in: This=0x583a730, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a077a4*=0, plFlavor=0x2a077a8*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Journal\\currentbad.exe\" ", varVal2=0x0), pType=0x2a077a4*=8, plFlavor=0x2a077a8*=0) returned 0x0
	[0188.651] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Journal\\currentbad.exe\" ") returned 0x64
	[0188.651] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Journal\\currentbad.exe\" ") returned 0x64
	[0188.652] IWbemClassObject:Get (in: This=0x583a730, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a077a4*=8, plFlavor=0x2a077a8*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Journal\\currentbad.exe\" ", varVal2=0x0), pType=0x2a077a4*=8, plFlavor=0x2a077a8*=0) returned 0x0
	[0188.652] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Journal\\currentbad.exe\" ") returned 0x64
	[0188.652] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Journal\\currentbad.exe\" ") returned 0x64
	[0188.652] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0188.652] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x731b30, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.658] IUnknown:QueryInterface (in: This=0x731b30, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x731b30) returned 0x0
	[0188.658] IUnknown:QueryInterface (in: This=0x731b30, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.658] IUnknown:QueryInterface (in: This=0x731b30, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.658] IUnknown:QueryInterface (in: This=0x731b30, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.658] IUnknown:AddRef (This=0x731b30) returned 0x3
	[0188.658] IUnknown:QueryInterface (in: This=0x731b30, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.659] IUnknown:QueryInterface (in: This=0x731b30, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.659] IUnknown:QueryInterface (in: This=0x731b30, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x731b34) returned 0x0
	[0188.659] IMarshal:GetUnmarshalClass (in: This=0x731b34, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.659] IUnknown:Release (This=0x731b34) returned 0x3
	[0188.659] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.659] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.659] IUnknown:QueryInterface (in: This=0x731b30, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.659] IUnknown:Release (This=0x731b30) returned 0x2
	[0188.659] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.659] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.659] IUnknown:QueryInterface (in: This=0x731b30, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x731b30) returned 0x0
	[0188.659] IUnknown:AddRef (This=0x731b30) returned 0x4
	[0188.659] IUnknown:Release (This=0x731b30) returned 0x3
	[0188.659] IUnknown:Release (This=0x731b30) returned 0x2
	[0188.659] CoTaskMemFree (pv=0x57a2e68) 
	[0188.659] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.659] IUnknown:AddRef (This=0x731b30) returned 0x3
	[0188.659] IWbemClassObject:Get (in: This=0x731b30, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.660] IWbemClassObject:Get (in: This=0x731b30, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3716\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.660] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3716\"") returned 0x5e
	[0188.660] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3716\"") returned 0x5e
	[0188.660] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.660] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.660] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.660] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.661] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.661] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.661] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac678) returned 0x0
	[0188.662] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac678, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac678) returned 0x0
	[0188.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac678, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac678, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.662] WbemDefPath:IUnknown:AddRef (This=0x57ac678) returned 0x3
	[0188.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac678, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac678, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac678, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x5835078) returned 0x0
	[0188.662] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5835078, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.662] WbemDefPath:IUnknown:Release (This=0x5835078) returned 0x3
	[0188.662] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.662] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac678, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.663] WbemDefPath:IUnknown:Release (This=0x57ac678) returned 0x2
	[0188.663] WbemDefPath:IUnknown:Release (This=0x57ac678) returned 0x1
	[0188.663] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.663] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.663] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac678, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac678) returned 0x0
	[0188.663] WbemDefPath:IUnknown:AddRef (This=0x57ac678) returned 0x3
	[0188.663] WbemDefPath:IUnknown:Release (This=0x57ac678) returned 0x2
	[0188.663] WbemDefPath:IWbemPath:SetText (This=0x57ac678, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3716\"") returned 0x0
	[0188.663] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.663] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.663] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.663] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.663] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.663] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.663] IWbemClassObject:Get (in: This=0x731b30, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a081fc*=0, plFlavor=0x2a08200*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xe84, varVal2=0x0), pType=0x2a081fc*=19, plFlavor=0x2a08200*=0) returned 0x0
	[0188.663] IWbemClassObject:Get (in: This=0x731b30, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a081fc*=19, plFlavor=0x2a08200*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xe84, varVal2=0x0), pType=0x2a081fc*=19, plFlavor=0x2a08200*=0) returned 0x0
	[0188.664] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.664] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.664] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.664] IWbemClassObject:Get (in: This=0x731b30, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a08300*=0, plFlavor=0x2a08304*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="final.exe", varVal2=0x0), pType=0x2a08300*=8, plFlavor=0x2a08304*=0) returned 0x0
	[0188.664] SysStringByteLen (bstr="final.exe") returned 0x12
	[0188.664] SysStringByteLen (bstr="final.exe") returned 0x12
	[0188.664] IWbemClassObject:Get (in: This=0x731b30, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a08300*=8, plFlavor=0x2a08304*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="final.exe", varVal2=0x0), pType=0x2a08300*=8, plFlavor=0x2a08304*=0) returned 0x0
	[0188.664] SysStringByteLen (bstr="final.exe") returned 0x12
	[0188.664] SysStringByteLen (bstr="final.exe") returned 0x12
	[0188.664] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.664] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.664] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.664] IWbemClassObject:Get (in: This=0x731b30, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a08434*=0, plFlavor=0x2a08438*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Microsoft Office\\final.exe\" ", varVal2=0x0), pType=0x2a08434*=8, plFlavor=0x2a08438*=0) returned 0x0
	[0188.664] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Microsoft Office\\final.exe\" ") returned 0x68
	[0188.664] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Microsoft Office\\final.exe\" ") returned 0x68
	[0188.665] IWbemClassObject:Get (in: This=0x731b30, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a08434*=8, plFlavor=0x2a08438*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Microsoft Office\\final.exe\" ", varVal2=0x0), pType=0x2a08434*=8, plFlavor=0x2a08438*=0) returned 0x0
	[0188.665] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Microsoft Office\\final.exe\" ") returned 0x68
	[0188.665] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Microsoft Office\\final.exe\" ") returned 0x68
	[0188.665] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.665] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x732190, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.666] IUnknown:QueryInterface (in: This=0x732190, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x732190) returned 0x0
	[0188.666] IUnknown:QueryInterface (in: This=0x732190, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.666] IUnknown:QueryInterface (in: This=0x732190, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.666] IUnknown:QueryInterface (in: This=0x732190, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.666] IUnknown:AddRef (This=0x732190) returned 0x3
	[0188.666] IUnknown:QueryInterface (in: This=0x732190, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.666] IUnknown:QueryInterface (in: This=0x732190, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.666] IUnknown:QueryInterface (in: This=0x732190, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x732194) returned 0x0
	[0188.666] IMarshal:GetUnmarshalClass (in: This=0x732194, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.666] IUnknown:Release (This=0x732194) returned 0x3
	[0188.666] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.667] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.667] IUnknown:QueryInterface (in: This=0x732190, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.667] IUnknown:Release (This=0x732190) returned 0x2
	[0188.667] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.667] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.667] IUnknown:QueryInterface (in: This=0x732190, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x732190) returned 0x0
	[0188.667] IUnknown:AddRef (This=0x732190) returned 0x4
	[0188.667] IUnknown:Release (This=0x732190) returned 0x3
	[0188.667] IUnknown:Release (This=0x732190) returned 0x2
	[0188.667] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.667] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.667] IUnknown:AddRef (This=0x732190) returned 0x3
	[0188.667] IWbemClassObject:Get (in: This=0x732190, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.667] IWbemClassObject:Get (in: This=0x732190, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3368\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.667] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3368\"") returned 0x5e
	[0188.667] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3368\"") returned 0x5e
	[0188.667] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.668] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.668] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.668] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.668] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.669] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac918) returned 0x0
	[0188.669] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac918, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac918) returned 0x0
	[0188.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac918, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac918, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.669] WbemDefPath:IUnknown:AddRef (This=0x57ac918) returned 0x3
	[0188.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac918, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac918, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac918, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x5834ee0) returned 0x0
	[0188.669] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5834ee0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.670] WbemDefPath:IUnknown:Release (This=0x5834ee0) returned 0x3
	[0188.670] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.670] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.670] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac918, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.670] WbemDefPath:IUnknown:Release (This=0x57ac918) returned 0x2
	[0188.670] WbemDefPath:IUnknown:Release (This=0x57ac918) returned 0x1
	[0188.670] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.670] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.670] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac918, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac918) returned 0x0
	[0188.670] WbemDefPath:IUnknown:AddRef (This=0x57ac918) returned 0x3
	[0188.670] WbemDefPath:IUnknown:Release (This=0x57ac918) returned 0x2
	[0188.670] WbemDefPath:IWbemPath:SetText (This=0x57ac918, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3368\"") returned 0x0
	[0188.670] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.671] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.671] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.671] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.671] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.671] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.671] IWbemClassObject:Get (in: This=0x732190, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a08e90*=0, plFlavor=0x2a08e94*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xd28, varVal2=0x0), pType=0x2a08e90*=19, plFlavor=0x2a08e94*=0) returned 0x0
	[0188.671] IWbemClassObject:Get (in: This=0x732190, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a08e90*=19, plFlavor=0x2a08e94*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xd28, varVal2=0x0), pType=0x2a08e90*=19, plFlavor=0x2a08e94*=0) returned 0x0
	[0188.671] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.671] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.671] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.671] IWbemClassObject:Get (in: This=0x732190, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a08f94*=0, plFlavor=0x2a08f98*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="kitchen.exe", varVal2=0x0), pType=0x2a08f94*=8, plFlavor=0x2a08f98*=0) returned 0x0
	[0188.671] SysStringByteLen (bstr="kitchen.exe") returned 0x16
	[0188.671] SysStringByteLen (bstr="kitchen.exe") returned 0x16
	[0188.672] IWbemClassObject:Get (in: This=0x732190, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a08f94*=8, plFlavor=0x2a08f98*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="kitchen.exe", varVal2=0x0), pType=0x2a08f94*=8, plFlavor=0x2a08f98*=0) returned 0x0
	[0188.672] SysStringByteLen (bstr="kitchen.exe") returned 0x16
	[0188.672] SysStringByteLen (bstr="kitchen.exe") returned 0x16
	[0188.672] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.672] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.672] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.672] IWbemClassObject:Get (in: This=0x732190, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a090d0*=0, plFlavor=0x2a090d4*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Journal\\kitchen.exe\" ", varVal2=0x0), pType=0x2a090d0*=8, plFlavor=0x2a090d4*=0) returned 0x0
	[0188.672] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Journal\\kitchen.exe\" ") returned 0x5e
	[0188.672] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Journal\\kitchen.exe\" ") returned 0x5e
	[0188.672] IWbemClassObject:Get (in: This=0x732190, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a090d0*=8, plFlavor=0x2a090d4*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Journal\\kitchen.exe\" ", varVal2=0x0), pType=0x2a090d0*=8, plFlavor=0x2a090d4*=0) returned 0x0
	[0188.673] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Journal\\kitchen.exe\" ") returned 0x5e
	[0188.673] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Journal\\kitchen.exe\" ") returned 0x5e
	[0188.673] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.673] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x731cc8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.674] IUnknown:QueryInterface (in: This=0x731cc8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x731cc8) returned 0x0
	[0188.674] IUnknown:QueryInterface (in: This=0x731cc8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.674] IUnknown:QueryInterface (in: This=0x731cc8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.674] IUnknown:QueryInterface (in: This=0x731cc8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.674] IUnknown:AddRef (This=0x731cc8) returned 0x3
	[0188.674] IUnknown:QueryInterface (in: This=0x731cc8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.674] IUnknown:QueryInterface (in: This=0x731cc8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.674] IUnknown:QueryInterface (in: This=0x731cc8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x731ccc) returned 0x0
	[0188.674] IMarshal:GetUnmarshalClass (in: This=0x731ccc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.674] IUnknown:Release (This=0x731ccc) returned 0x3
	[0188.674] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.675] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.675] IUnknown:QueryInterface (in: This=0x731cc8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.675] IUnknown:Release (This=0x731cc8) returned 0x2
	[0188.675] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.675] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.675] IUnknown:QueryInterface (in: This=0x731cc8, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x731cc8) returned 0x0
	[0188.675] IUnknown:AddRef (This=0x731cc8) returned 0x4
	[0188.675] IUnknown:Release (This=0x731cc8) returned 0x3
	[0188.675] IUnknown:Release (This=0x731cc8) returned 0x2
	[0188.675] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.675] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.675] IUnknown:AddRef (This=0x731cc8) returned 0x3
	[0188.675] IWbemClassObject:Get (in: This=0x731cc8, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.675] IWbemClassObject:Get (in: This=0x731cc8, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2340\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.675] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2340\"") returned 0x5e
	[0188.675] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2340\"") returned 0x5e
	[0188.675] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.676] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.676] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.676] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.676] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.677] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.677] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac6e8) returned 0x0
	[0188.677] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.677] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac6e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac6e8) returned 0x0
	[0188.677] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac6e8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.677] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac6e8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.677] WbemDefPath:IUnknown:AddRef (This=0x57ac6e8) returned 0x3
	[0188.677] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac6e8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.677] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac6e8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.677] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac6e8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x58353c0) returned 0x0
	[0188.677] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58353c0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.677] WbemDefPath:IUnknown:Release (This=0x58353c0) returned 0x3
	[0188.677] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.678] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.678] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac6e8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.678] WbemDefPath:IUnknown:Release (This=0x57ac6e8) returned 0x2
	[0188.678] WbemDefPath:IUnknown:Release (This=0x57ac6e8) returned 0x1
	[0188.678] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.678] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.678] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac6e8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac6e8) returned 0x0
	[0188.678] WbemDefPath:IUnknown:AddRef (This=0x57ac6e8) returned 0x3
	[0188.678] WbemDefPath:IUnknown:Release (This=0x57ac6e8) returned 0x2
	[0188.678] WbemDefPath:IWbemPath:SetText (This=0x57ac6e8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2340\"") returned 0x0
	[0188.678] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.678] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.678] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.678] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.678] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.678] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.678] IWbemClassObject:Get (in: This=0x731cc8, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a09b0c*=0, plFlavor=0x2a09b10*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x924, varVal2=0x0), pType=0x2a09b0c*=19, plFlavor=0x2a09b10*=0) returned 0x0
	[0188.679] IWbemClassObject:Get (in: This=0x731cc8, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a09b0c*=19, plFlavor=0x2a09b10*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x924, varVal2=0x0), pType=0x2a09b0c*=19, plFlavor=0x2a09b10*=0) returned 0x0
	[0188.679] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.679] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.679] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.679] IWbemClassObject:Get (in: This=0x731cc8, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a09c10*=0, plFlavor=0x2a09c14*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="goalscientistnear.exe", varVal2=0x0), pType=0x2a09c10*=8, plFlavor=0x2a09c14*=0) returned 0x0
	[0188.679] SysStringByteLen (bstr="goalscientistnear.exe") returned 0x2a
	[0188.679] SysStringByteLen (bstr="goalscientistnear.exe") returned 0x2a
	[0188.679] IWbemClassObject:Get (in: This=0x731cc8, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a09c10*=8, plFlavor=0x2a09c14*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="goalscientistnear.exe", varVal2=0x0), pType=0x2a09c10*=8, plFlavor=0x2a09c14*=0) returned 0x0
	[0188.686] SysStringByteLen (bstr="goalscientistnear.exe") returned 0x2a
	[0188.687] SysStringByteLen (bstr="goalscientistnear.exe") returned 0x2a
	[0188.687] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.687] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.687] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.687] IWbemClassObject:Get (in: This=0x731cc8, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a09d74*=0, plFlavor=0x2a09d78*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows NT\\goalscientistnear.exe\" ", varVal2=0x0), pType=0x2a09d74*=8, plFlavor=0x2a09d78*=0) returned 0x0
	[0188.687] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows NT\\goalscientistnear.exe\" ") returned 0x74
	[0188.687] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows NT\\goalscientistnear.exe\" ") returned 0x74
	[0188.687] IWbemClassObject:Get (in: This=0x731cc8, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a09d74*=8, plFlavor=0x2a09d78*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows NT\\goalscientistnear.exe\" ", varVal2=0x0), pType=0x2a09d74*=8, plFlavor=0x2a09d78*=0) returned 0x0
	[0188.687] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows NT\\goalscientistnear.exe\" ") returned 0x74
	[0188.687] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows NT\\goalscientistnear.exe\" ") returned 0x74
	[0188.687] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0188.688] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x29fc548 | out: apObjects=0x57a2ea8*=0x731ff8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.689] IUnknown:QueryInterface (in: This=0x731ff8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x731ff8) returned 0x0
	[0188.689] IUnknown:QueryInterface (in: This=0x731ff8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.689] IUnknown:QueryInterface (in: This=0x731ff8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.689] IUnknown:QueryInterface (in: This=0x731ff8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.689] IUnknown:AddRef (This=0x731ff8) returned 0x3
	[0188.689] IUnknown:QueryInterface (in: This=0x731ff8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.689] IUnknown:QueryInterface (in: This=0x731ff8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.689] IUnknown:QueryInterface (in: This=0x731ff8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x731ffc) returned 0x0
	[0188.689] IMarshal:GetUnmarshalClass (in: This=0x731ffc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.689] IUnknown:Release (This=0x731ffc) returned 0x3
	[0188.689] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.690] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.690] IUnknown:QueryInterface (in: This=0x731ff8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.690] IUnknown:Release (This=0x731ff8) returned 0x2
	[0188.690] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.690] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.690] IUnknown:QueryInterface (in: This=0x731ff8, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x731ff8) returned 0x0
	[0188.690] IUnknown:AddRef (This=0x731ff8) returned 0x4
	[0188.690] IUnknown:Release (This=0x731ff8) returned 0x3
	[0188.690] IUnknown:Release (This=0x731ff8) returned 0x2
	[0188.690] CoTaskMemFree (pv=0x57a2ea8) 
	[0188.690] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.690] IUnknown:AddRef (This=0x731ff8) returned 0x3
	[0188.690] IWbemClassObject:Get (in: This=0x731ff8, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.690] IWbemClassObject:Get (in: This=0x731ff8, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3396\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.690] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3396\"") returned 0x5e
	[0188.690] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3396\"") returned 0x5e
	[0188.690] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.691] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.691] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.691] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.692] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0188.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.692] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac758) returned 0x0
	[0188.692] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0188.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac758, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac758) returned 0x0
	[0188.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac758, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac758, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.692] WbemDefPath:IUnknown:AddRef (This=0x57ac758) returned 0x3
	[0188.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac758, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac758, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac758, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x58352a0) returned 0x0
	[0188.693] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58352a0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.693] WbemDefPath:IUnknown:Release (This=0x58352a0) returned 0x3
	[0188.693] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.693] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac758, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.693] WbemDefPath:IUnknown:Release (This=0x57ac758) returned 0x2
	[0188.693] WbemDefPath:IUnknown:Release (This=0x57ac758) returned 0x1
	[0188.693] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.693] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac758, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac758) returned 0x0
	[0188.693] WbemDefPath:IUnknown:AddRef (This=0x57ac758) returned 0x3
	[0188.694] WbemDefPath:IUnknown:Release (This=0x57ac758) returned 0x2
	[0188.694] WbemDefPath:IWbemPath:SetText (This=0x57ac758, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3396\"") returned 0x0
	[0188.694] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.694] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.694] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.694] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.694] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.694] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.694] IWbemClassObject:Get (in: This=0x731ff8, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0a898*=0, plFlavor=0x2a0a89c*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xd44, varVal2=0x0), pType=0x2a0a898*=19, plFlavor=0x2a0a89c*=0) returned 0x0
	[0188.694] IWbemClassObject:Get (in: This=0x731ff8, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0a898*=19, plFlavor=0x2a0a89c*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xd44, varVal2=0x0), pType=0x2a0a898*=19, plFlavor=0x2a0a89c*=0) returned 0x0
	[0188.694] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.694] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.694] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.694] IWbemClassObject:Get (in: This=0x731ff8, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0a99c*=0, plFlavor=0x2a0a9a0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="perform-late-scientist.exe", varVal2=0x0), pType=0x2a0a99c*=8, plFlavor=0x2a0a9a0*=0) returned 0x0
	[0188.694] SysStringByteLen (bstr="perform-late-scientist.exe") returned 0x34
	[0188.694] SysStringByteLen (bstr="perform-late-scientist.exe") returned 0x34
	[0188.695] IWbemClassObject:Get (in: This=0x731ff8, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0a99c*=8, plFlavor=0x2a0a9a0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="perform-late-scientist.exe", varVal2=0x0), pType=0x2a0a99c*=8, plFlavor=0x2a0a9a0*=0) returned 0x0
	[0188.695] SysStringByteLen (bstr="perform-late-scientist.exe") returned 0x34
	[0188.695] SysStringByteLen (bstr="perform-late-scientist.exe") returned 0x34
	[0188.695] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.695] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.695] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.695] IWbemClassObject:Get (in: This=0x731ff8, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0ab18*=0, plFlavor=0x2a0ab1c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\WindowsPowerShell\\perform-late-scientist.exe\" ", varVal2=0x0), pType=0x2a0ab18*=8, plFlavor=0x2a0ab1c*=0) returned 0x0
	[0188.695] SysStringByteLen (bstr="\"C:\\Program Files\\WindowsPowerShell\\perform-late-scientist.exe\" ") returned 0x80
	[0188.695] SysStringByteLen (bstr="\"C:\\Program Files\\WindowsPowerShell\\perform-late-scientist.exe\" ") returned 0x80
	[0188.695] IWbemClassObject:Get (in: This=0x731ff8, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0ab18*=8, plFlavor=0x2a0ab1c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\WindowsPowerShell\\perform-late-scientist.exe\" ", varVal2=0x0), pType=0x2a0ab18*=8, plFlavor=0x2a0ab1c*=0) returned 0x0
	[0188.695] SysStringByteLen (bstr="\"C:\\Program Files\\WindowsPowerShell\\perform-late-scientist.exe\" ") returned 0x80
	[0188.695] SysStringByteLen (bstr="\"C:\\Program Files\\WindowsPowerShell\\perform-late-scientist.exe\" ") returned 0x80
	[0188.695] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.695] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x7324c0, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.696] IUnknown:QueryInterface (in: This=0x7324c0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x7324c0) returned 0x0
	[0188.697] IUnknown:QueryInterface (in: This=0x7324c0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.697] IUnknown:QueryInterface (in: This=0x7324c0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.697] IUnknown:QueryInterface (in: This=0x7324c0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.697] IUnknown:AddRef (This=0x7324c0) returned 0x3
	[0188.697] IUnknown:QueryInterface (in: This=0x7324c0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.697] IUnknown:QueryInterface (in: This=0x7324c0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.697] IUnknown:QueryInterface (in: This=0x7324c0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x7324c4) returned 0x0
	[0188.697] IMarshal:GetUnmarshalClass (in: This=0x7324c4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.697] IUnknown:Release (This=0x7324c4) returned 0x3
	[0188.697] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.697] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.697] IUnknown:QueryInterface (in: This=0x7324c0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.697] IUnknown:Release (This=0x7324c0) returned 0x2
	[0188.697] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.697] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.697] IUnknown:QueryInterface (in: This=0x7324c0, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x7324c0) returned 0x0
	[0188.698] IUnknown:AddRef (This=0x7324c0) returned 0x4
	[0188.698] IUnknown:Release (This=0x7324c0) returned 0x3
	[0188.698] IUnknown:Release (This=0x7324c0) returned 0x2
	[0188.698] CoTaskMemFree (pv=0x57a2d58) 
	[0188.698] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.698] IUnknown:AddRef (This=0x7324c0) returned 0x3
	[0188.698] IWbemClassObject:Get (in: This=0x7324c0, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.698] IWbemClassObject:Get (in: This=0x7324c0, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1124\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.698] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1124\"") returned 0x5e
	[0188.698] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1124\"") returned 0x5e
	[0188.698] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.698] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.698] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.698] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.699] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.700] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.700] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac7c8) returned 0x0
	[0188.700] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.700] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac7c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac7c8) returned 0x0
	[0188.700] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac7c8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.700] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac7c8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.700] WbemDefPath:IUnknown:AddRef (This=0x57ac7c8) returned 0x3
	[0188.700] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac7c8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.700] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac7c8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.700] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac7c8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x5835660) returned 0x0
	[0188.700] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5835660, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.700] WbemDefPath:IUnknown:Release (This=0x5835660) returned 0x3
	[0188.700] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.700] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.701] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac7c8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.701] WbemDefPath:IUnknown:Release (This=0x57ac7c8) returned 0x2
	[0188.701] WbemDefPath:IUnknown:Release (This=0x57ac7c8) returned 0x1
	[0188.701] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.701] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.701] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac7c8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac7c8) returned 0x0
	[0188.701] WbemDefPath:IUnknown:AddRef (This=0x57ac7c8) returned 0x3
	[0188.701] WbemDefPath:IUnknown:Release (This=0x57ac7c8) returned 0x2
	[0188.701] WbemDefPath:IWbemPath:SetText (This=0x57ac7c8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1124\"") returned 0x0
	[0188.701] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.701] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.701] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.701] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.701] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.701] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.701] IWbemClassObject:Get (in: This=0x7324c0, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0b5dc*=0, plFlavor=0x2a0b5e0*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x464, varVal2=0x0), pType=0x2a0b5dc*=19, plFlavor=0x2a0b5e0*=0) returned 0x0
	[0188.702] IWbemClassObject:Get (in: This=0x7324c0, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0b5dc*=19, plFlavor=0x2a0b5e0*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x464, varVal2=0x0), pType=0x2a0b5dc*=19, plFlavor=0x2a0b5e0*=0) returned 0x0
	[0188.702] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.702] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.702] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.702] IWbemClassObject:Get (in: This=0x7324c0, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0b6e0*=0, plFlavor=0x2a0b6e4*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dream.exe", varVal2=0x0), pType=0x2a0b6e0*=8, plFlavor=0x2a0b6e4*=0) returned 0x0
	[0188.702] SysStringByteLen (bstr="dream.exe") returned 0x12
	[0188.702] SysStringByteLen (bstr="dream.exe") returned 0x12
	[0188.702] IWbemClassObject:Get (in: This=0x7324c0, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0b6e0*=8, plFlavor=0x2a0b6e4*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dream.exe", varVal2=0x0), pType=0x2a0b6e0*=8, plFlavor=0x2a0b6e4*=0) returned 0x0
	[0188.702] SysStringByteLen (bstr="dream.exe") returned 0x12
	[0188.702] SysStringByteLen (bstr="dream.exe") returned 0x12
	[0188.702] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.702] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.704] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.704] IWbemClassObject:Get (in: This=0x7324c0, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0b814*=0, plFlavor=0x2a0b818*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Photo Viewer\\dream.exe\" ", varVal2=0x0), pType=0x2a0b814*=8, plFlavor=0x2a0b818*=0) returned 0x0
	[0188.704] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Photo Viewer\\dream.exe\" ") returned 0x64
	[0188.705] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Photo Viewer\\dream.exe\" ") returned 0x64
	[0188.705] IWbemClassObject:Get (in: This=0x7324c0, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0b814*=8, plFlavor=0x2a0b818*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Photo Viewer\\dream.exe\" ", varVal2=0x0), pType=0x2a0b814*=8, plFlavor=0x2a0b818*=0) returned 0x0
	[0188.705] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Photo Viewer\\dream.exe\" ") returned 0x64
	[0188.705] SysStringByteLen (bstr="\"C:\\Program Files\\Windows Photo Viewer\\dream.exe\" ") returned 0x64
	[0188.705] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.705] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x731e60, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.706] IUnknown:QueryInterface (in: This=0x731e60, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x731e60) returned 0x0
	[0188.706] IUnknown:QueryInterface (in: This=0x731e60, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.706] IUnknown:QueryInterface (in: This=0x731e60, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.706] IUnknown:QueryInterface (in: This=0x731e60, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.706] IUnknown:AddRef (This=0x731e60) returned 0x3
	[0188.706] IUnknown:QueryInterface (in: This=0x731e60, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.706] IUnknown:QueryInterface (in: This=0x731e60, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.706] IUnknown:QueryInterface (in: This=0x731e60, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x731e64) returned 0x0
	[0188.706] IMarshal:GetUnmarshalClass (in: This=0x731e64, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.707] IUnknown:Release (This=0x731e64) returned 0x3
	[0188.707] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.707] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.707] IUnknown:QueryInterface (in: This=0x731e60, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.707] IUnknown:Release (This=0x731e60) returned 0x2
	[0188.707] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.707] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.707] IUnknown:QueryInterface (in: This=0x731e60, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x731e60) returned 0x0
	[0188.707] IUnknown:AddRef (This=0x731e60) returned 0x4
	[0188.707] IUnknown:Release (This=0x731e60) returned 0x3
	[0188.707] IUnknown:Release (This=0x731e60) returned 0x2
	[0188.707] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.707] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.707] IUnknown:AddRef (This=0x731e60) returned 0x3
	[0188.707] IWbemClassObject:Get (in: This=0x731e60, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.707] IWbemClassObject:Get (in: This=0x731e60, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3388\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.708] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3388\"") returned 0x5e
	[0188.708] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3388\"") returned 0x5e
	[0188.708] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.708] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.708] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.708] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.709] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ce8) returned 0x0
	[0188.709] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ce8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.709] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ce8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57abf08) returned 0x0
	[0188.709] WbemDefPath:IUnknown:Release (This=0x57a2ce8) returned 0x0
	[0188.709] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf08, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57abf08) returned 0x0
	[0188.709] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf08, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.709] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf08, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.709] WbemDefPath:IUnknown:AddRef (This=0x57abf08) returned 0x3
	[0188.710] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf08, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.710] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf08, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.710] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf08, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x58354c8) returned 0x0
	[0188.710] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58354c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.710] WbemDefPath:IUnknown:Release (This=0x58354c8) returned 0x3
	[0188.710] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.710] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.710] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf08, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.710] WbemDefPath:IUnknown:Release (This=0x57abf08) returned 0x2
	[0188.710] WbemDefPath:IUnknown:Release (This=0x57abf08) returned 0x1
	[0188.710] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.710] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.710] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf08, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57abf08) returned 0x0
	[0188.710] WbemDefPath:IUnknown:AddRef (This=0x57abf08) returned 0x3
	[0188.710] WbemDefPath:IUnknown:Release (This=0x57abf08) returned 0x2
	[0188.710] WbemDefPath:IWbemPath:SetText (This=0x57abf08, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3388\"") returned 0x0
	[0188.710] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.710] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.710] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.711] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.711] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.711] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.711] IWbemClassObject:Get (in: This=0x731e60, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0c264*=0, plFlavor=0x2a0c268*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xd3c, varVal2=0x0), pType=0x2a0c264*=19, plFlavor=0x2a0c268*=0) returned 0x0
	[0188.711] IWbemClassObject:Get (in: This=0x731e60, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0c264*=19, plFlavor=0x2a0c268*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xd3c, varVal2=0x0), pType=0x2a0c264*=19, plFlavor=0x2a0c268*=0) returned 0x0
	[0188.711] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.711] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.712] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.712] IWbemClassObject:Get (in: This=0x731e60, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0c368*=0, plFlavor=0x2a0c36c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="toward after.exe", varVal2=0x0), pType=0x2a0c368*=8, plFlavor=0x2a0c36c*=0) returned 0x0
	[0188.712] SysStringByteLen (bstr="toward after.exe") returned 0x20
	[0188.712] SysStringByteLen (bstr="toward after.exe") returned 0x20
	[0188.712] IWbemClassObject:Get (in: This=0x731e60, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0c368*=8, plFlavor=0x2a0c36c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="toward after.exe", varVal2=0x0), pType=0x2a0c368*=8, plFlavor=0x2a0c36c*=0) returned 0x0
	[0188.712] SysStringByteLen (bstr="toward after.exe") returned 0x20
	[0188.712] SysStringByteLen (bstr="toward after.exe") returned 0x20
	[0188.712] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.712] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.712] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.712] IWbemClassObject:Get (in: This=0x731e60, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0c4bc*=0, plFlavor=0x2a0c4c0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows Media Player\\toward after.exe\" ", varVal2=0x0), pType=0x2a0c4bc*=8, plFlavor=0x2a0c4c0*=0) returned 0x0
	[0188.712] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Media Player\\toward after.exe\" ") returned 0x7e
	[0188.712] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Media Player\\toward after.exe\" ") returned 0x7e
	[0188.712] IWbemClassObject:Get (in: This=0x731e60, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0c4bc*=8, plFlavor=0x2a0c4c0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows Media Player\\toward after.exe\" ", varVal2=0x0), pType=0x2a0c4bc*=8, plFlavor=0x2a0c4c0*=0) returned 0x0
	[0188.713] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Media Player\\toward after.exe\" ") returned 0x7e
	[0188.713] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Media Player\\toward after.exe\" ") returned 0x7e
	[0188.713] CoTaskMemAlloc (cb=0x4) returned 0x57a2e18
	[0188.713] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e18, puReturned=0x29fc548 | out: apObjects=0x57a2e18*=0x731800, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.714] IUnknown:QueryInterface (in: This=0x731800, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x731800) returned 0x0
	[0188.714] IUnknown:QueryInterface (in: This=0x731800, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.714] IUnknown:QueryInterface (in: This=0x731800, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.714] IUnknown:QueryInterface (in: This=0x731800, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.714] IUnknown:AddRef (This=0x731800) returned 0x3
	[0188.714] IUnknown:QueryInterface (in: This=0x731800, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.715] IUnknown:QueryInterface (in: This=0x731800, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.715] IUnknown:QueryInterface (in: This=0x731800, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x731804) returned 0x0
	[0188.715] IMarshal:GetUnmarshalClass (in: This=0x731804, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.715] IUnknown:Release (This=0x731804) returned 0x3
	[0188.715] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.715] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.715] IUnknown:QueryInterface (in: This=0x731800, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.715] IUnknown:Release (This=0x731800) returned 0x2
	[0188.715] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.715] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.715] IUnknown:QueryInterface (in: This=0x731800, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x731800) returned 0x0
	[0188.715] IUnknown:AddRef (This=0x731800) returned 0x4
	[0188.715] IUnknown:Release (This=0x731800) returned 0x3
	[0188.715] IUnknown:Release (This=0x731800) returned 0x2
	[0188.715] CoTaskMemFree (pv=0x57a2e18) 
	[0188.715] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.715] IUnknown:AddRef (This=0x731800) returned 0x3
	[0188.715] IWbemClassObject:Get (in: This=0x731800, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.716] IWbemClassObject:Get (in: This=0x731800, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3260\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.716] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3260\"") returned 0x5e
	[0188.716] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3260\"") returned 0x5e
	[0188.716] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.716] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.716] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.716] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.717] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.717] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.717] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac988) returned 0x0
	[0188.718] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.718] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac988, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac988) returned 0x0
	[0188.718] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac988, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.718] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac988, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.718] WbemDefPath:IUnknown:AddRef (This=0x57ac988) returned 0x3
	[0188.718] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac988, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.718] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac988, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.718] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac988, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x5835798) returned 0x0
	[0188.718] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5835798, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.718] WbemDefPath:IUnknown:Release (This=0x5835798) returned 0x3
	[0188.718] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.718] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.718] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac988, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.718] WbemDefPath:IUnknown:Release (This=0x57ac988) returned 0x2
	[0188.718] WbemDefPath:IUnknown:Release (This=0x57ac988) returned 0x1
	[0188.718] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.719] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.719] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac988, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac988) returned 0x0
	[0188.719] WbemDefPath:IUnknown:AddRef (This=0x57ac988) returned 0x3
	[0188.719] WbemDefPath:IUnknown:Release (This=0x57ac988) returned 0x2
	[0188.719] WbemDefPath:IWbemPath:SetText (This=0x57ac988, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3260\"") returned 0x0
	[0188.719] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.719] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.719] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.719] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.719] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.719] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.719] IWbemClassObject:Get (in: This=0x731800, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0cf64*=0, plFlavor=0x2a0cf68*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xcbc, varVal2=0x0), pType=0x2a0cf64*=19, plFlavor=0x2a0cf68*=0) returned 0x0
	[0188.719] IWbemClassObject:Get (in: This=0x731800, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0cf64*=19, plFlavor=0x2a0cf68*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xcbc, varVal2=0x0), pType=0x2a0cf64*=19, plFlavor=0x2a0cf68*=0) returned 0x0
	[0188.720] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.720] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.720] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.720] IWbemClassObject:Get (in: This=0x731800, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0d068*=0, plFlavor=0x2a0d06c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="owner.exe", varVal2=0x0), pType=0x2a0d068*=8, plFlavor=0x2a0d06c*=0) returned 0x0
	[0188.720] SysStringByteLen (bstr="owner.exe") returned 0x12
	[0188.720] SysStringByteLen (bstr="owner.exe") returned 0x12
	[0188.720] IWbemClassObject:Get (in: This=0x731800, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0d068*=8, plFlavor=0x2a0d06c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="owner.exe", varVal2=0x0), pType=0x2a0d068*=8, plFlavor=0x2a0d06c*=0) returned 0x0
	[0188.720] SysStringByteLen (bstr="owner.exe") returned 0x12
	[0188.720] SysStringByteLen (bstr="owner.exe") returned 0x12
	[0188.720] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.720] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.720] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.720] IWbemClassObject:Get (in: This=0x731800, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0d19c*=0, plFlavor=0x2a0d1a0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows Portable Devices\\owner.exe\" ", varVal2=0x0), pType=0x2a0d19c*=8, plFlavor=0x2a0d1a0*=0) returned 0x0
	[0188.720] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Portable Devices\\owner.exe\" ") returned 0x78
	[0188.720] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Portable Devices\\owner.exe\" ") returned 0x78
	[0188.720] IWbemClassObject:Get (in: This=0x731800, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0d19c*=8, plFlavor=0x2a0d1a0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows Portable Devices\\owner.exe\" ", varVal2=0x0), pType=0x2a0d19c*=8, plFlavor=0x2a0d1a0*=0) returned 0x0
	[0188.721] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Portable Devices\\owner.exe\" ") returned 0x78
	[0188.721] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows Portable Devices\\owner.exe\" ") returned 0x78
	[0188.721] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.721] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x582b520, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.722] IUnknown:QueryInterface (in: This=0x582b520, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582b520) returned 0x0
	[0188.722] IUnknown:QueryInterface (in: This=0x582b520, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.723] IUnknown:QueryInterface (in: This=0x582b520, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.723] IUnknown:QueryInterface (in: This=0x582b520, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.723] IUnknown:AddRef (This=0x582b520) returned 0x3
	[0188.723] IUnknown:QueryInterface (in: This=0x582b520, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.723] IUnknown:QueryInterface (in: This=0x582b520, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.723] IUnknown:QueryInterface (in: This=0x582b520, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582b524) returned 0x0
	[0188.723] IMarshal:GetUnmarshalClass (in: This=0x582b524, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.723] IUnknown:Release (This=0x582b524) returned 0x3
	[0188.723] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.723] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.723] IUnknown:QueryInterface (in: This=0x582b520, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.723] IUnknown:Release (This=0x582b520) returned 0x2
	[0188.723] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.723] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.723] IUnknown:QueryInterface (in: This=0x582b520, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582b520) returned 0x0
	[0188.723] IUnknown:AddRef (This=0x582b520) returned 0x4
	[0188.723] IUnknown:Release (This=0x582b520) returned 0x3
	[0188.724] IUnknown:Release (This=0x582b520) returned 0x2
	[0188.724] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.724] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.724] IUnknown:AddRef (This=0x582b520) returned 0x3
	[0188.724] IWbemClassObject:Get (in: This=0x582b520, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.724] IWbemClassObject:Get (in: This=0x582b520, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4084\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.724] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4084\"") returned 0x5e
	[0188.724] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4084\"") returned 0x5e
	[0188.724] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.724] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.724] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.724] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.725] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2cd8) returned 0x0
	[0188.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2cd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.726] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2cd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac9f8) returned 0x0
	[0188.726] WbemDefPath:IUnknown:Release (This=0x57a2cd8) returned 0x0
	[0188.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac9f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac9f8) returned 0x0
	[0188.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac9f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac9f8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.726] WbemDefPath:IUnknown:AddRef (This=0x57ac9f8) returned 0x3
	[0188.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac9f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac9f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac9f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x5835a80) returned 0x0
	[0188.726] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5835a80, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.726] WbemDefPath:IUnknown:Release (This=0x5835a80) returned 0x3
	[0188.726] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.727] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac9f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.727] WbemDefPath:IUnknown:Release (This=0x57ac9f8) returned 0x2
	[0188.727] WbemDefPath:IUnknown:Release (This=0x57ac9f8) returned 0x1
	[0188.727] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.727] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac9f8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac9f8) returned 0x0
	[0188.727] WbemDefPath:IUnknown:AddRef (This=0x57ac9f8) returned 0x3
	[0188.727] WbemDefPath:IUnknown:Release (This=0x57ac9f8) returned 0x2
	[0188.727] WbemDefPath:IWbemPath:SetText (This=0x57ac9f8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4084\"") returned 0x0
	[0188.728] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.728] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.728] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.728] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.728] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.728] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.728] IWbemClassObject:Get (in: This=0x582b520, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0dc28*=0, plFlavor=0x2a0dc2c*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xff4, varVal2=0x0), pType=0x2a0dc28*=19, plFlavor=0x2a0dc2c*=0) returned 0x0
	[0188.728] IWbemClassObject:Get (in: This=0x582b520, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0dc28*=19, plFlavor=0x2a0dc2c*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xff4, varVal2=0x0), pType=0x2a0dc28*=19, plFlavor=0x2a0dc2c*=0) returned 0x0
	[0188.728] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.728] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.729] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.729] IWbemClassObject:Get (in: This=0x582b520, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0dd2c*=0, plFlavor=0x2a0dd30*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="oh-her.exe", varVal2=0x0), pType=0x2a0dd2c*=8, plFlavor=0x2a0dd30*=0) returned 0x0
	[0188.729] SysStringByteLen (bstr="oh-her.exe") returned 0x14
	[0188.729] SysStringByteLen (bstr="oh-her.exe") returned 0x14
	[0188.729] IWbemClassObject:Get (in: This=0x582b520, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0dd2c*=8, plFlavor=0x2a0dd30*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="oh-her.exe", varVal2=0x0), pType=0x2a0dd2c*=8, plFlavor=0x2a0dd30*=0) returned 0x0
	[0188.729] SysStringByteLen (bstr="oh-her.exe") returned 0x14
	[0188.729] SysStringByteLen (bstr="oh-her.exe") returned 0x14
	[0188.729] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.729] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.729] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.729] IWbemClassObject:Get (in: This=0x582b520, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0de68*=0, plFlavor=0x2a0de6c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows NT\\oh-her.exe\" ", varVal2=0x0), pType=0x2a0de68*=8, plFlavor=0x2a0de6c*=0) returned 0x0
	[0188.729] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows NT\\oh-her.exe\" ") returned 0x5e
	[0188.729] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows NT\\oh-her.exe\" ") returned 0x5e
	[0188.729] IWbemClassObject:Get (in: This=0x582b520, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0de68*=8, plFlavor=0x2a0de6c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows NT\\oh-her.exe\" ", varVal2=0x0), pType=0x2a0de68*=8, plFlavor=0x2a0de6c*=0) returned 0x0
	[0188.729] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows NT\\oh-her.exe\" ") returned 0x5e
	[0188.729] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Windows NT\\oh-her.exe\" ") returned 0x5e
	[0188.730] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.730] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x582c378, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.731] IUnknown:QueryInterface (in: This=0x582c378, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582c378) returned 0x0
	[0188.731] IUnknown:QueryInterface (in: This=0x582c378, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.731] IUnknown:QueryInterface (in: This=0x582c378, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.731] IUnknown:QueryInterface (in: This=0x582c378, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.731] IUnknown:AddRef (This=0x582c378) returned 0x3
	[0188.731] IUnknown:QueryInterface (in: This=0x582c378, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.731] IUnknown:QueryInterface (in: This=0x582c378, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.731] IUnknown:QueryInterface (in: This=0x582c378, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582c37c) returned 0x0
	[0188.731] IMarshal:GetUnmarshalClass (in: This=0x582c37c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.731] IUnknown:Release (This=0x582c37c) returned 0x3
	[0188.731] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.731] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.731] IUnknown:QueryInterface (in: This=0x582c378, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.731] IUnknown:Release (This=0x582c378) returned 0x2
	[0188.731] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.731] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.732] IUnknown:QueryInterface (in: This=0x582c378, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582c378) returned 0x0
	[0188.732] IUnknown:AddRef (This=0x582c378) returned 0x4
	[0188.732] IUnknown:Release (This=0x582c378) returned 0x3
	[0188.732] IUnknown:Release (This=0x582c378) returned 0x2
	[0188.732] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.732] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.732] IUnknown:AddRef (This=0x582c378) returned 0x3
	[0188.732] IWbemClassObject:Get (in: This=0x582c378, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.732] IWbemClassObject:Get (in: This=0x582c378, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3772\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.732] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3772\"") returned 0x5e
	[0188.732] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3772\"") returned 0x5e
	[0188.733] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.733] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.733] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.733] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.734] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.734] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac288) returned 0x0
	[0188.734] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac288, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac288) returned 0x0
	[0188.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac288, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac288, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.734] WbemDefPath:IUnknown:AddRef (This=0x57ac288) returned 0x3
	[0188.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac288, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac288, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac288, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x5834b08) returned 0x0
	[0188.735] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5834b08, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.735] WbemDefPath:IUnknown:Release (This=0x5834b08) returned 0x3
	[0188.735] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.735] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac288, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.735] WbemDefPath:IUnknown:Release (This=0x57ac288) returned 0x2
	[0188.735] WbemDefPath:IUnknown:Release (This=0x57ac288) returned 0x1
	[0188.735] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.735] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac288, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac288) returned 0x0
	[0188.735] WbemDefPath:IUnknown:AddRef (This=0x57ac288) returned 0x3
	[0188.735] WbemDefPath:IUnknown:Release (This=0x57ac288) returned 0x2
	[0188.735] WbemDefPath:IWbemPath:SetText (This=0x57ac288, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3772\"") returned 0x0
	[0188.735] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.735] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.735] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.736] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.736] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.736] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.736] IWbemClassObject:Get (in: This=0x582c378, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0e8a4*=0, plFlavor=0x2a0e8a8*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xebc, varVal2=0x0), pType=0x2a0e8a4*=19, plFlavor=0x2a0e8a8*=0) returned 0x0
	[0188.736] IWbemClassObject:Get (in: This=0x582c378, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0e8a4*=19, plFlavor=0x2a0e8a8*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xebc, varVal2=0x0), pType=0x2a0e8a4*=19, plFlavor=0x2a0e8a8*=0) returned 0x0
	[0188.736] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.736] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.736] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.736] IWbemClassObject:Get (in: This=0x582c378, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0e9a8*=0, plFlavor=0x2a0e9ac*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="later.exe", varVal2=0x0), pType=0x2a0e9a8*=8, plFlavor=0x2a0e9ac*=0) returned 0x0
	[0188.736] SysStringByteLen (bstr="later.exe") returned 0x12
	[0188.736] SysStringByteLen (bstr="later.exe") returned 0x12
	[0188.736] IWbemClassObject:Get (in: This=0x582c378, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0e9a8*=8, plFlavor=0x2a0e9ac*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="later.exe", varVal2=0x0), pType=0x2a0e9a8*=8, plFlavor=0x2a0e9ac*=0) returned 0x0
	[0188.736] SysStringByteLen (bstr="later.exe") returned 0x12
	[0188.736] SysStringByteLen (bstr="later.exe") returned 0x12
	[0188.737] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.737] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.737] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.737] IWbemClassObject:Get (in: This=0x582c378, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0eadc*=0, plFlavor=0x2a0eae0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Reference Assemblies\\later.exe\" ", varVal2=0x0), pType=0x2a0eadc*=8, plFlavor=0x2a0eae0*=0) returned 0x0
	[0188.737] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Reference Assemblies\\later.exe\" ") returned 0x70
	[0188.737] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Reference Assemblies\\later.exe\" ") returned 0x70
	[0188.737] IWbemClassObject:Get (in: This=0x582c378, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0eadc*=8, plFlavor=0x2a0eae0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Reference Assemblies\\later.exe\" ", varVal2=0x0), pType=0x2a0eadc*=8, plFlavor=0x2a0eae0*=0) returned 0x0
	[0188.737] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Reference Assemblies\\later.exe\" ") returned 0x70
	[0188.737] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Reference Assemblies\\later.exe\" ") returned 0x70
	[0188.737] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0188.737] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x582b6b8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.739] IUnknown:QueryInterface (in: This=0x582b6b8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582b6b8) returned 0x0
	[0188.739] IUnknown:QueryInterface (in: This=0x582b6b8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.740] IUnknown:QueryInterface (in: This=0x582b6b8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.740] IUnknown:QueryInterface (in: This=0x582b6b8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.740] IUnknown:AddRef (This=0x582b6b8) returned 0x3
	[0188.740] IUnknown:QueryInterface (in: This=0x582b6b8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.740] IUnknown:QueryInterface (in: This=0x582b6b8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.740] IUnknown:QueryInterface (in: This=0x582b6b8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582b6bc) returned 0x0
	[0188.740] IMarshal:GetUnmarshalClass (in: This=0x582b6bc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.740] IUnknown:Release (This=0x582b6bc) returned 0x3
	[0188.740] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.740] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.740] IUnknown:QueryInterface (in: This=0x582b6b8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.740] IUnknown:Release (This=0x582b6b8) returned 0x2
	[0188.740] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.740] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.740] IUnknown:QueryInterface (in: This=0x582b6b8, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582b6b8) returned 0x0
	[0188.741] IUnknown:AddRef (This=0x582b6b8) returned 0x4
	[0188.741] IUnknown:Release (This=0x582b6b8) returned 0x3
	[0188.741] IUnknown:Release (This=0x582b6b8) returned 0x2
	[0188.741] CoTaskMemFree (pv=0x57a2e68) 
	[0188.741] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.741] IUnknown:AddRef (This=0x582b6b8) returned 0x3
	[0188.741] IWbemClassObject:Get (in: This=0x582b6b8, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.741] IWbemClassObject:Get (in: This=0x582b6b8, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.741] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"") returned 0x5e
	[0188.741] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"") returned 0x5e
	[0188.741] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.741] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.741] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.741] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.744] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0188.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.744] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ac8a8) returned 0x0
	[0188.744] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0188.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ac8a8) returned 0x0
	[0188.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.744] WbemDefPath:IUnknown:AddRef (This=0x57ac8a8) returned 0x3
	[0188.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x5834df0) returned 0x0
	[0188.745] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5834df0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.746] WbemDefPath:IUnknown:Release (This=0x5834df0) returned 0x3
	[0188.746] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.746] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.746] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.747] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x2
	[0188.747] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x1
	[0188.747] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.747] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.747] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ac8a8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ac8a8) returned 0x0
	[0188.747] WbemDefPath:IUnknown:AddRef (This=0x57ac8a8) returned 0x3
	[0188.747] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x2
	[0188.747] WbemDefPath:IWbemPath:SetText (This=0x57ac8a8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"") returned 0x0
	[0188.747] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.747] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.747] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.747] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.747] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.747] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.747] IWbemClassObject:Get (in: This=0x582b6b8, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0f550*=0, plFlavor=0x2a0f554*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xa0c, varVal2=0x0), pType=0x2a0f550*=19, plFlavor=0x2a0f554*=0) returned 0x0
	[0188.748] IWbemClassObject:Get (in: This=0x582b6b8, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0f550*=19, plFlavor=0x2a0f554*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xa0c, varVal2=0x0), pType=0x2a0f550*=19, plFlavor=0x2a0f554*=0) returned 0x0
	[0188.748] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.748] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.748] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.748] IWbemClassObject:Get (in: This=0x582b6b8, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0f654*=0, plFlavor=0x2a0f658*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="family_enjoy_well.exe", varVal2=0x0), pType=0x2a0f654*=8, plFlavor=0x2a0f658*=0) returned 0x0
	[0188.748] SysStringByteLen (bstr="family_enjoy_well.exe") returned 0x2a
	[0188.748] SysStringByteLen (bstr="family_enjoy_well.exe") returned 0x2a
	[0188.748] IWbemClassObject:Get (in: This=0x582b6b8, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0f654*=8, plFlavor=0x2a0f658*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="family_enjoy_well.exe", varVal2=0x0), pType=0x2a0f654*=8, plFlavor=0x2a0f658*=0) returned 0x0
	[0188.748] SysStringByteLen (bstr="family_enjoy_well.exe") returned 0x2a
	[0188.748] SysStringByteLen (bstr="family_enjoy_well.exe") returned 0x2a
	[0188.748] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.748] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.748] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.749] IWbemClassObject:Get (in: This=0x582b6b8, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0f7b8*=0, plFlavor=0x2a0f7bc*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Reference Assemblies\\family_enjoy_well.exe\" ", varVal2=0x0), pType=0x2a0f7b8*=8, plFlavor=0x2a0f7bc*=0) returned 0x0
	[0188.749] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Reference Assemblies\\family_enjoy_well.exe\" ") returned 0x88
	[0188.749] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Reference Assemblies\\family_enjoy_well.exe\" ") returned 0x88
	[0188.749] IWbemClassObject:Get (in: This=0x582b6b8, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a0f7b8*=8, plFlavor=0x2a0f7bc*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Reference Assemblies\\family_enjoy_well.exe\" ", varVal2=0x0), pType=0x2a0f7b8*=8, plFlavor=0x2a0f7bc*=0) returned 0x0
	[0188.749] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Reference Assemblies\\family_enjoy_well.exe\" ") returned 0x88
	[0188.749] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Reference Assemblies\\family_enjoy_well.exe\" ") returned 0x88
	[0188.749] CoTaskMemAlloc (cb=0x4) returned 0x57a2e18
	[0188.749] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e18, puReturned=0x29fc548 | out: apObjects=0x57a2e18*=0x582a6c8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.751] IUnknown:QueryInterface (in: This=0x582a6c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582a6c8) returned 0x0
	[0188.751] IUnknown:QueryInterface (in: This=0x582a6c8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.751] IUnknown:QueryInterface (in: This=0x582a6c8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.751] IUnknown:QueryInterface (in: This=0x582a6c8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.751] IUnknown:AddRef (This=0x582a6c8) returned 0x3
	[0188.751] IUnknown:QueryInterface (in: This=0x582a6c8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.751] IUnknown:QueryInterface (in: This=0x582a6c8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.751] IUnknown:QueryInterface (in: This=0x582a6c8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582a6cc) returned 0x0
	[0188.751] IMarshal:GetUnmarshalClass (in: This=0x582a6cc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.751] IUnknown:Release (This=0x582a6cc) returned 0x3
	[0188.752] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.752] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.752] IUnknown:QueryInterface (in: This=0x582a6c8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.752] IUnknown:Release (This=0x582a6c8) returned 0x2
	[0188.752] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.752] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.752] IUnknown:QueryInterface (in: This=0x582a6c8, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582a6c8) returned 0x0
	[0188.752] IUnknown:AddRef (This=0x582a6c8) returned 0x4
	[0188.752] IUnknown:Release (This=0x582a6c8) returned 0x3
	[0188.752] IUnknown:Release (This=0x582a6c8) returned 0x2
	[0188.752] CoTaskMemFree (pv=0x57a2e18) 
	[0188.752] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.752] IUnknown:AddRef (This=0x582a6c8) returned 0x3
	[0188.752] IWbemClassObject:Get (in: This=0x582a6c8, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.752] IWbemClassObject:Get (in: This=0x582a6c8, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3780\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.752] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3780\"") returned 0x5e
	[0188.752] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3780\"") returned 0x5e
	[0188.753] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.753] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.753] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.753] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.754] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.754] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.754] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57aca68) returned 0x0
	[0188.754] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0188.754] WbemDefPath:IUnknown:QueryInterface (in: This=0x57aca68, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57aca68) returned 0x0
	[0188.754] WbemDefPath:IUnknown:QueryInterface (in: This=0x57aca68, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.754] WbemDefPath:IUnknown:QueryInterface (in: This=0x57aca68, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.755] WbemDefPath:IUnknown:AddRef (This=0x57aca68) returned 0x3
	[0188.755] WbemDefPath:IUnknown:QueryInterface (in: This=0x57aca68, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.755] WbemDefPath:IUnknown:QueryInterface (in: This=0x57aca68, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.755] WbemDefPath:IUnknown:QueryInterface (in: This=0x57aca68, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x583ca10) returned 0x0
	[0188.755] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x583ca10, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.755] WbemDefPath:IUnknown:Release (This=0x583ca10) returned 0x3
	[0188.755] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0188.755] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0188.755] WbemDefPath:IUnknown:QueryInterface (in: This=0x57aca68, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.755] WbemDefPath:IUnknown:Release (This=0x57aca68) returned 0x2
	[0188.755] WbemDefPath:IUnknown:Release (This=0x57aca68) returned 0x1
	[0188.755] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0188.755] CoGetContextToken (in: pToken=0x19f0a0 | out: pToken=0x19f0a0) returned 0x0
	[0188.755] WbemDefPath:IUnknown:QueryInterface (in: This=0x57aca68, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57aca68) returned 0x0
	[0188.755] WbemDefPath:IUnknown:AddRef (This=0x57aca68) returned 0x3
	[0188.755] WbemDefPath:IUnknown:Release (This=0x57aca68) returned 0x2
	[0188.756] WbemDefPath:IWbemPath:SetText (This=0x57aca68, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3780\"") returned 0x0
	[0188.756] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.756] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.756] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.756] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.756] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.756] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.756] IWbemClassObject:Get (in: This=0x582a6c8, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a1028c*=0, plFlavor=0x2a10290*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xec4, varVal2=0x0), pType=0x2a1028c*=19, plFlavor=0x2a10290*=0) returned 0x0
	[0188.756] IWbemClassObject:Get (in: This=0x582a6c8, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a1028c*=19, plFlavor=0x2a10290*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xec4, varVal2=0x0), pType=0x2a1028c*=19, plFlavor=0x2a10290*=0) returned 0x0
	[0188.756] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.756] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.756] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.756] IWbemClassObject:Get (in: This=0x582a6c8, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a10390*=0, plFlavor=0x2a10394*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="career_left.exe", varVal2=0x0), pType=0x2a10390*=8, plFlavor=0x2a10394*=0) returned 0x0
	[0188.756] SysStringByteLen (bstr="career_left.exe") returned 0x1e
	[0188.756] SysStringByteLen (bstr="career_left.exe") returned 0x1e
	[0188.757] IWbemClassObject:Get (in: This=0x582a6c8, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a10390*=8, plFlavor=0x2a10394*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="career_left.exe", varVal2=0x0), pType=0x2a10390*=8, plFlavor=0x2a10394*=0) returned 0x0
	[0188.757] SysStringByteLen (bstr="career_left.exe") returned 0x1e
	[0188.757] SysStringByteLen (bstr="career_left.exe") returned 0x1e
	[0188.757] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.757] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.757] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.757] IWbemClassObject:Get (in: This=0x582a6c8, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a104dc*=0, plFlavor=0x2a104e0*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Microsoft Office\\career_left.exe\" ", varVal2=0x0), pType=0x2a104dc*=8, plFlavor=0x2a104e0*=0) returned 0x0
	[0188.757] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Microsoft Office\\career_left.exe\" ") returned 0x74
	[0188.757] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Microsoft Office\\career_left.exe\" ") returned 0x74
	[0188.757] IWbemClassObject:Get (in: This=0x582a6c8, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a104dc*=8, plFlavor=0x2a104e0*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Microsoft Office\\career_left.exe\" ", varVal2=0x0), pType=0x2a104dc*=8, plFlavor=0x2a104e0*=0) returned 0x0
	[0188.757] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Microsoft Office\\career_left.exe\" ") returned 0x74
	[0188.757] SysStringByteLen (bstr="\"C:\\Program Files (x86)\\Microsoft Office\\career_left.exe\" ") returned 0x74
	[0188.757] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0188.757] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x582a9f8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.761] IUnknown:QueryInterface (in: This=0x582a9f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582a9f8) returned 0x0
	[0188.761] IUnknown:QueryInterface (in: This=0x582a9f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.761] IUnknown:QueryInterface (in: This=0x582a9f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.761] IUnknown:QueryInterface (in: This=0x582a9f8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.761] IUnknown:AddRef (This=0x582a9f8) returned 0x3
	[0188.761] IUnknown:QueryInterface (in: This=0x582a9f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.761] IUnknown:QueryInterface (in: This=0x582a9f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.761] IUnknown:QueryInterface (in: This=0x582a9f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582a9fc) returned 0x0
	[0188.761] IMarshal:GetUnmarshalClass (in: This=0x582a9fc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.761] IUnknown:Release (This=0x582a9fc) returned 0x3
	[0188.762] CoGetContextToken (in: pToken=0x19e260 | out: pToken=0x19e260) returned 0x0
	[0188.762] CoGetContextToken (in: pToken=0x19e668 | out: pToken=0x19e668) returned 0x0
	[0188.762] IUnknown:QueryInterface (in: This=0x582a9f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.762] IUnknown:Release (This=0x582a9f8) returned 0x2
	[0188.762] CoGetContextToken (in: pToken=0x19ec38 | out: pToken=0x19ec38) returned 0x0
	[0188.762] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0188.762] IUnknown:QueryInterface (in: This=0x582a9f8, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582a9f8) returned 0x0
	[0188.762] IUnknown:AddRef (This=0x582a9f8) returned 0x4
	[0188.762] IUnknown:Release (This=0x582a9f8) returned 0x3
	[0188.762] IUnknown:Release (This=0x582a9f8) returned 0x2
	[0188.762] CoTaskMemFree (pv=0x57a2e68) 
	[0188.762] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0188.762] IUnknown:AddRef (This=0x582a9f8) returned 0x3
	[0188.762] IWbemClassObject:Get (in: This=0x582a9f8, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.762] IWbemClassObject:Get (in: This=0x582a9f8, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.763] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"") returned 0x5e
	[0188.763] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"") returned 0x5e
	[0188.763] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.763] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.763] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.763] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.764] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.764] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.764] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57acad8) returned 0x0
	[0188.764] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.764] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57acad8) returned 0x0
	[0188.764] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.764] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.765] WbemDefPath:IUnknown:AddRef (This=0x57acad8) returned 0x3
	[0188.765] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.765] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.765] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x583cc38) returned 0x0
	[0188.765] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x583cc38, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.765] WbemDefPath:IUnknown:Release (This=0x583cc38) returned 0x3
	[0188.765] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.765] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x2
	[0188.765] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x1
	[0188.765] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acad8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57acad8) returned 0x0
	[0188.766] WbemDefPath:IUnknown:AddRef (This=0x57acad8) returned 0x3
	[0188.766] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x2
	[0188.766] WbemDefPath:IWbemPath:SetText (This=0x57acad8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"") returned 0x0
	[0188.766] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.766] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.766] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.766] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.766] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.766] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.766] IWbemClassObject:Get (in: This=0x582a9f8, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a10f68*=0, plFlavor=0x2a10f6c*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9a8, varVal2=0x0), pType=0x2a10f68*=19, plFlavor=0x2a10f6c*=0) returned 0x0
	[0188.766] IWbemClassObject:Get (in: This=0x582a9f8, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a10f68*=19, plFlavor=0x2a10f6c*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9a8, varVal2=0x0), pType=0x2a10f68*=19, plFlavor=0x2a10f6c*=0) returned 0x0
	[0188.767] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.767] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.768] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.768] IWbemClassObject:Get (in: This=0x582a9f8, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a1106c*=0, plFlavor=0x2a11070*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="rest-reality-fill.exe", varVal2=0x0), pType=0x2a1106c*=8, plFlavor=0x2a11070*=0) returned 0x0
	[0188.768] SysStringByteLen (bstr="rest-reality-fill.exe") returned 0x2a
	[0188.768] IWbemClassObject:Get (in: This=0x582a9f8, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a1106c*=8, plFlavor=0x2a11070*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="rest-reality-fill.exe", varVal2=0x0), pType=0x2a1106c*=8, plFlavor=0x2a11070*=0) returned 0x0
	[0188.768] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.768] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.768] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.768] IWbemClassObject:Get (in: This=0x582a9f8, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a111d0*=0, plFlavor=0x2a111d4*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Common Files\\rest-reality-fill.exe\" ", varVal2=0x0), pType=0x2a111d0*=8, plFlavor=0x2a111d4*=0) returned 0x0
	[0188.768] IWbemClassObject:Get (in: This=0x582a9f8, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a111d0*=8, plFlavor=0x2a111d4*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Common Files\\rest-reality-fill.exe\" ", varVal2=0x0), pType=0x2a111d0*=8, plFlavor=0x2a111d4*=0) returned 0x0
	[0188.768] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.768] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x582a530, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.769] IUnknown:QueryInterface (in: This=0x582a530, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582a530) returned 0x0
	[0188.770] IUnknown:QueryInterface (in: This=0x582a530, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.770] IUnknown:QueryInterface (in: This=0x582a530, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.770] IUnknown:QueryInterface (in: This=0x582a530, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.770] IUnknown:AddRef (This=0x582a530) returned 0x3
	[0188.770] IUnknown:QueryInterface (in: This=0x582a530, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.770] IUnknown:QueryInterface (in: This=0x582a530, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.770] IUnknown:QueryInterface (in: This=0x582a530, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582a534) returned 0x0
	[0188.770] IMarshal:GetUnmarshalClass (in: This=0x582a534, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.770] IUnknown:Release (This=0x582a534) returned 0x3
	[0188.770] IUnknown:QueryInterface (in: This=0x582a530, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.770] IUnknown:Release (This=0x582a530) returned 0x2
	[0188.770] IUnknown:QueryInterface (in: This=0x582a530, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582a530) returned 0x0
	[0188.770] IUnknown:AddRef (This=0x582a530) returned 0x4
	[0188.770] IUnknown:Release (This=0x582a530) returned 0x3
	[0188.771] IUnknown:Release (This=0x582a530) returned 0x2
	[0188.771] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.771] IUnknown:AddRef (This=0x582a530) returned 0x3
	[0188.771] IWbemClassObject:Get (in: This=0x582a530, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.771] IWbemClassObject:Get (in: This=0x582a530, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1468\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.771] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.771] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.771] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.771] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.772] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2de8) returned 0x0
	[0188.772] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.772] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2de8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57acbb8) returned 0x0
	[0188.772] WbemDefPath:IUnknown:Release (This=0x57a2de8) returned 0x0
	[0188.772] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acbb8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57acbb8) returned 0x0
	[0188.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acbb8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acbb8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.773] WbemDefPath:IUnknown:AddRef (This=0x57acbb8) returned 0x3
	[0188.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acbb8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acbb8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acbb8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x583cb30) returned 0x0
	[0188.773] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x583cb30, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.773] WbemDefPath:IUnknown:Release (This=0x583cb30) returned 0x3
	[0188.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acbb8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.773] WbemDefPath:IUnknown:Release (This=0x57acbb8) returned 0x2
	[0188.773] WbemDefPath:IUnknown:Release (This=0x57acbb8) returned 0x1
	[0188.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acbb8, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57acbb8) returned 0x0
	[0188.774] WbemDefPath:IUnknown:AddRef (This=0x57acbb8) returned 0x3
	[0188.774] WbemDefPath:IUnknown:Release (This=0x57acbb8) returned 0x2
	[0188.774] WbemDefPath:IWbemPath:SetText (This=0x57acbb8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1468\"") returned 0x0
	[0188.774] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.774] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.774] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.774] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.774] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.774] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.774] IWbemClassObject:Get (in: This=0x582a530, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a11c74*=0, plFlavor=0x2a11c78*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5bc, varVal2=0x0), pType=0x2a11c74*=19, plFlavor=0x2a11c78*=0) returned 0x0
	[0188.774] IWbemClassObject:Get (in: This=0x582a530, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a11c74*=19, plFlavor=0x2a11c78*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5bc, varVal2=0x0), pType=0x2a11c74*=19, plFlavor=0x2a11c78*=0) returned 0x0
	[0188.774] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.774] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.774] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.775] IWbemClassObject:Get (in: This=0x582a530, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a11d78*=0, plFlavor=0x2a11d7c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="real-condition-american.exe", varVal2=0x0), pType=0x2a11d78*=8, plFlavor=0x2a11d7c*=0) returned 0x0
	[0188.775] IWbemClassObject:Get (in: This=0x582a530, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a11d78*=8, plFlavor=0x2a11d7c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="real-condition-american.exe", varVal2=0x0), pType=0x2a11d78*=8, plFlavor=0x2a11d7c*=0) returned 0x0
	[0188.775] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.775] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.775] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.775] IWbemClassObject:Get (in: This=0x582a530, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a11ef4*=0, plFlavor=0x2a11ef8*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Photo Viewer\\real-condition-american.exe\" ", varVal2=0x0), pType=0x2a11ef4*=8, plFlavor=0x2a11ef8*=0) returned 0x0
	[0188.775] IWbemClassObject:Get (in: This=0x582a530, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a11ef4*=8, plFlavor=0x2a11ef8*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Photo Viewer\\real-condition-american.exe\" ", varVal2=0x0), pType=0x2a11ef4*=8, plFlavor=0x2a11ef8*=0) returned 0x0
	[0188.775] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.775] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x582b9e8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.777] IUnknown:QueryInterface (in: This=0x582b9e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582b9e8) returned 0x0
	[0188.777] IUnknown:QueryInterface (in: This=0x582b9e8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.777] IUnknown:QueryInterface (in: This=0x582b9e8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.778] IUnknown:QueryInterface (in: This=0x582b9e8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.778] IUnknown:AddRef (This=0x582b9e8) returned 0x3
	[0188.778] IUnknown:QueryInterface (in: This=0x582b9e8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.778] IUnknown:QueryInterface (in: This=0x582b9e8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.778] IUnknown:QueryInterface (in: This=0x582b9e8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582b9ec) returned 0x0
	[0188.778] IMarshal:GetUnmarshalClass (in: This=0x582b9ec, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.778] IUnknown:Release (This=0x582b9ec) returned 0x3
	[0188.778] IUnknown:QueryInterface (in: This=0x582b9e8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.778] IUnknown:Release (This=0x582b9e8) returned 0x2
	[0188.778] IUnknown:QueryInterface (in: This=0x582b9e8, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582b9e8) returned 0x0
	[0188.779] IUnknown:AddRef (This=0x582b9e8) returned 0x4
	[0188.779] IUnknown:Release (This=0x582b9e8) returned 0x3
	[0188.779] IUnknown:Release (This=0x582b9e8) returned 0x2
	[0188.779] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.779] IUnknown:AddRef (This=0x582b9e8) returned 0x3
	[0188.779] IWbemClassObject:Get (in: This=0x582b9e8, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.779] IWbemClassObject:Get (in: This=0x582b9e8, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2360\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.779] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.779] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.779] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.779] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.780] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0188.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.780] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57acc28) returned 0x0
	[0188.781] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0188.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc28, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57acc28) returned 0x0
	[0188.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc28, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc28, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.781] WbemDefPath:IUnknown:AddRef (This=0x57acc28) returned 0x3
	[0188.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc28, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc28, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc28, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x583cd88) returned 0x0
	[0188.781] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x583cd88, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.781] WbemDefPath:IUnknown:Release (This=0x583cd88) returned 0x3
	[0188.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc28, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.781] WbemDefPath:IUnknown:Release (This=0x57acc28) returned 0x2
	[0188.781] WbemDefPath:IUnknown:Release (This=0x57acc28) returned 0x1
	[0188.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc28, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57acc28) returned 0x0
	[0188.781] WbemDefPath:IUnknown:AddRef (This=0x57acc28) returned 0x3
	[0188.782] WbemDefPath:IUnknown:Release (This=0x57acc28) returned 0x2
	[0188.782] WbemDefPath:IWbemPath:SetText (This=0x57acc28, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2360\"") returned 0x0
	[0188.782] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.782] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.783] IWbemClassObject:Get (in: This=0x582b9e8, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a129d4*=0, plFlavor=0x2a129d8*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x938, varVal2=0x0), pType=0x2a129d4*=19, plFlavor=0x2a129d8*=0) returned 0x0
	[0188.783] IWbemClassObject:Get (in: This=0x582b9e8, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a129d4*=19, plFlavor=0x2a129d8*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x938, varVal2=0x0), pType=0x2a129d4*=19, plFlavor=0x2a129d8*=0) returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.783] IWbemClassObject:Get (in: This=0x582b9e8, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a12ad8*=0, plFlavor=0x2a12adc*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="medicalwife.exe", varVal2=0x0), pType=0x2a12ad8*=8, plFlavor=0x2a12adc*=0) returned 0x0
	[0188.783] IWbemClassObject:Get (in: This=0x582b9e8, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a12ad8*=8, plFlavor=0x2a12adc*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="medicalwife.exe", varVal2=0x0), pType=0x2a12ad8*=8, plFlavor=0x2a12adc*=0) returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.783] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.783] IWbemClassObject:Get (in: This=0x582b9e8, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a12c24*=0, plFlavor=0x2a12c28*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows Portable Devices\\medicalwife.exe\" ", varVal2=0x0), pType=0x2a12c24*=8, plFlavor=0x2a12c28*=0) returned 0x0
	[0188.784] IWbemClassObject:Get (in: This=0x582b9e8, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a12c24*=8, plFlavor=0x2a12c28*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\Windows Portable Devices\\medicalwife.exe\" ", varVal2=0x0), pType=0x2a12c24*=8, plFlavor=0x2a12c28*=0) returned 0x0
	[0188.784] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0188.784] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x29fc548 | out: apObjects=0x57a2ea8*=0x582ab90, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.786] IUnknown:QueryInterface (in: This=0x582ab90, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582ab90) returned 0x0
	[0188.786] IUnknown:QueryInterface (in: This=0x582ab90, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.786] IUnknown:QueryInterface (in: This=0x582ab90, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.786] IUnknown:QueryInterface (in: This=0x582ab90, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.786] IUnknown:AddRef (This=0x582ab90) returned 0x3
	[0188.786] IUnknown:QueryInterface (in: This=0x582ab90, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.786] IUnknown:QueryInterface (in: This=0x582ab90, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.786] IUnknown:QueryInterface (in: This=0x582ab90, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582ab94) returned 0x0
	[0188.786] IMarshal:GetUnmarshalClass (in: This=0x582ab94, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.786] IUnknown:Release (This=0x582ab94) returned 0x3
	[0188.787] IUnknown:QueryInterface (in: This=0x582ab90, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.787] IUnknown:Release (This=0x582ab90) returned 0x2
	[0188.787] IUnknown:QueryInterface (in: This=0x582ab90, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582ab90) returned 0x0
	[0188.787] IUnknown:AddRef (This=0x582ab90) returned 0x4
	[0188.787] IUnknown:Release (This=0x582ab90) returned 0x3
	[0188.787] IUnknown:Release (This=0x582ab90) returned 0x2
	[0188.787] CoTaskMemFree (pv=0x57a2ea8) 
	[0188.787] IUnknown:AddRef (This=0x582ab90) returned 0x3
	[0188.787] IWbemClassObject:Get (in: This=0x582ab90, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.787] IWbemClassObject:Get (in: This=0x582ab90, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3520\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.787] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.788] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.788] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.788] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.789] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.790] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57acc98) returned 0x0
	[0188.790] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc98, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57acc98) returned 0x0
	[0188.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc98, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc98, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.790] WbemDefPath:IUnknown:AddRef (This=0x57acc98) returned 0x3
	[0188.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc98, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc98, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc98, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x583bee8) returned 0x0
	[0188.790] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x583bee8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.790] WbemDefPath:IUnknown:Release (This=0x583bee8) returned 0x3
	[0188.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc98, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.790] WbemDefPath:IUnknown:Release (This=0x57acc98) returned 0x2
	[0188.791] WbemDefPath:IUnknown:Release (This=0x57acc98) returned 0x1
	[0188.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acc98, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57acc98) returned 0x0
	[0188.791] WbemDefPath:IUnknown:AddRef (This=0x57acc98) returned 0x3
	[0188.791] WbemDefPath:IUnknown:Release (This=0x57acc98) returned 0x2
	[0188.791] WbemDefPath:IWbemPath:SetText (This=0x57acc98, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3520\"") returned 0x0
	[0188.791] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.791] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.791] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.791] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.791] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.791] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.791] IWbemClassObject:Get (in: This=0x582ab90, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a136e0*=0, plFlavor=0x2a136e4*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xdc0, varVal2=0x0), pType=0x2a136e0*=19, plFlavor=0x2a136e4*=0) returned 0x0
	[0188.791] IWbemClassObject:Get (in: This=0x582ab90, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a136e0*=19, plFlavor=0x2a136e4*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xdc0, varVal2=0x0), pType=0x2a136e0*=19, plFlavor=0x2a136e4*=0) returned 0x0
	[0188.791] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.793] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.793] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.793] IWbemClassObject:Get (in: This=0x582ab90, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a137e4*=0, plFlavor=0x2a137e8*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="happy_service.exe", varVal2=0x0), pType=0x2a137e4*=8, plFlavor=0x2a137e8*=0) returned 0x0
	[0188.793] IWbemClassObject:Get (in: This=0x582ab90, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a137e4*=8, plFlavor=0x2a137e8*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="happy_service.exe", varVal2=0x0), pType=0x2a137e4*=8, plFlavor=0x2a137e8*=0) returned 0x0
	[0188.793] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.793] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.793] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.793] IWbemClassObject:Get (in: This=0x582ab90, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a13938*=0, plFlavor=0x2a1393c*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\WindowsPowerShell\\happy_service.exe\" ", varVal2=0x0), pType=0x2a13938*=8, plFlavor=0x2a1393c*=0) returned 0x0
	[0188.793] IWbemClassObject:Get (in: This=0x582ab90, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a13938*=8, plFlavor=0x2a1393c*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files (x86)\\WindowsPowerShell\\happy_service.exe\" ", varVal2=0x0), pType=0x2a13938*=8, plFlavor=0x2a1393c*=0) returned 0x0
	[0188.793] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.793] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x582b850, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.795] IUnknown:QueryInterface (in: This=0x582b850, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582b850) returned 0x0
	[0188.795] IUnknown:QueryInterface (in: This=0x582b850, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.795] IUnknown:QueryInterface (in: This=0x582b850, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.795] IUnknown:QueryInterface (in: This=0x582b850, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.796] IUnknown:AddRef (This=0x582b850) returned 0x3
	[0188.796] IUnknown:QueryInterface (in: This=0x582b850, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.796] IUnknown:QueryInterface (in: This=0x582b850, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.796] IUnknown:QueryInterface (in: This=0x582b850, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582b854) returned 0x0
	[0188.796] IMarshal:GetUnmarshalClass (in: This=0x582b854, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.796] IUnknown:Release (This=0x582b854) returned 0x3
	[0188.796] IUnknown:QueryInterface (in: This=0x582b850, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.796] IUnknown:Release (This=0x582b850) returned 0x2
	[0188.796] IUnknown:QueryInterface (in: This=0x582b850, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582b850) returned 0x0
	[0188.796] IUnknown:AddRef (This=0x582b850) returned 0x4
	[0188.796] IUnknown:Release (This=0x582b850) returned 0x3
	[0188.796] IUnknown:Release (This=0x582b850) returned 0x2
	[0188.796] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.796] IUnknown:AddRef (This=0x582b850) returned 0x3
	[0188.796] IWbemClassObject:Get (in: This=0x582b850, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.796] IWbemClassObject:Get (in: This=0x582b850, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3808\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.797] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.797] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.797] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.797] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.798] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.798] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57abf78) returned 0x0
	[0188.798] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0188.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57abf78) returned 0x0
	[0188.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.799] WbemDefPath:IUnknown:AddRef (This=0x57abf78) returned 0x3
	[0188.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x583c428) returned 0x0
	[0188.799] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x583c428, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.799] WbemDefPath:IUnknown:Release (This=0x583c428) returned 0x3
	[0188.800] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.800] WbemDefPath:IUnknown:Release (This=0x57abf78) returned 0x2
	[0188.800] WbemDefPath:IUnknown:Release (This=0x57abf78) returned 0x1
	[0188.800] WbemDefPath:IUnknown:QueryInterface (in: This=0x57abf78, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57abf78) returned 0x0
	[0188.800] WbemDefPath:IUnknown:AddRef (This=0x57abf78) returned 0x3
	[0188.800] WbemDefPath:IUnknown:Release (This=0x57abf78) returned 0x2
	[0188.800] WbemDefPath:IWbemPath:SetText (This=0x57abf78, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3808\"") returned 0x0
	[0188.800] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.800] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.800] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.800] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.800] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.800] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.800] IWbemClassObject:Get (in: This=0x582b850, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a143d4*=0, plFlavor=0x2a143d8*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xee0, varVal2=0x0), pType=0x2a143d4*=19, plFlavor=0x2a143d8*=0) returned 0x0
	[0188.800] IWbemClassObject:Get (in: This=0x582b850, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a143d4*=19, plFlavor=0x2a143d8*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xee0, varVal2=0x0), pType=0x2a143d4*=19, plFlavor=0x2a143d8*=0) returned 0x0
	[0188.801] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.801] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.801] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.801] IWbemClassObject:Get (in: This=0x582b850, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a144d8*=0, plFlavor=0x2a144dc*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="many.exe", varVal2=0x0), pType=0x2a144d8*=8, plFlavor=0x2a144dc*=0) returned 0x0
	[0188.801] IWbemClassObject:Get (in: This=0x582b850, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a144d8*=8, plFlavor=0x2a144dc*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="many.exe", varVal2=0x0), pType=0x2a144d8*=8, plFlavor=0x2a144dc*=0) returned 0x0
	[0188.801] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.801] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.801] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.801] IWbemClassObject:Get (in: This=0x582b850, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a1460c*=0, plFlavor=0x2a14610*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Media Player\\many.exe\" ", varVal2=0x0), pType=0x2a1460c*=8, plFlavor=0x2a14610*=0) returned 0x0
	[0188.801] IWbemClassObject:Get (in: This=0x582b850, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a1460c*=8, plFlavor=0x2a14610*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\Windows Media Player\\many.exe\" ", varVal2=0x0), pType=0x2a1460c*=8, plFlavor=0x2a14610*=0) returned 0x0
	[0188.801] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.801] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x582bb80, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.802] IUnknown:QueryInterface (in: This=0x582bb80, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582bb80) returned 0x0
	[0188.802] IUnknown:QueryInterface (in: This=0x582bb80, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.802] IUnknown:QueryInterface (in: This=0x582bb80, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.802] IUnknown:QueryInterface (in: This=0x582bb80, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.803] IUnknown:AddRef (This=0x582bb80) returned 0x3
	[0188.803] IUnknown:QueryInterface (in: This=0x582bb80, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.803] IUnknown:QueryInterface (in: This=0x582bb80, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.803] IUnknown:QueryInterface (in: This=0x582bb80, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582bb84) returned 0x0
	[0188.803] IMarshal:GetUnmarshalClass (in: This=0x582bb84, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.803] IUnknown:Release (This=0x582bb84) returned 0x3
	[0188.803] IUnknown:QueryInterface (in: This=0x582bb80, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.803] IUnknown:Release (This=0x582bb80) returned 0x2
	[0188.803] IUnknown:QueryInterface (in: This=0x582bb80, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582bb80) returned 0x0
	[0188.803] IUnknown:AddRef (This=0x582bb80) returned 0x4
	[0188.803] IUnknown:Release (This=0x582bb80) returned 0x3
	[0188.803] IUnknown:Release (This=0x582bb80) returned 0x2
	[0188.803] CoTaskMemFree (pv=0x57a2d58) 
	[0188.803] IUnknown:AddRef (This=0x582bb80) returned 0x3
	[0188.804] IWbemClassObject:Get (in: This=0x582bb80, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.804] IWbemClassObject:Get (in: This=0x582bb80, wszName="__PATH", lFlags=0, pVal=0x19f298*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f298*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"", varVal2=0x0), pType=0x19f31c*=8, plFlavor=0x19f318*=64) returned 0x0
	[0188.804] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.804] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.804] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.804] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.805] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.806] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57ace58) returned 0x0
	[0188.806] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ace58, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57ace58) returned 0x0
	[0188.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ace58, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0188.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ace58, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0188.806] WbemDefPath:IUnknown:AddRef (This=0x57ace58) returned 0x3
	[0188.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ace58, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0188.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ace58, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0188.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ace58, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x583c440) returned 0x0
	[0188.806] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x583c440, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.806] WbemDefPath:IUnknown:Release (This=0x583c440) returned 0x3
	[0188.807] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ace58, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0188.807] WbemDefPath:IUnknown:Release (This=0x57ace58) returned 0x2
	[0188.807] WbemDefPath:IUnknown:Release (This=0x57ace58) returned 0x1
	[0188.807] WbemDefPath:IUnknown:QueryInterface (in: This=0x57ace58, riid=0x19f170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f16c | out: ppvObject=0x19f16c*=0x57ace58) returned 0x0
	[0188.807] WbemDefPath:IUnknown:AddRef (This=0x57ace58) returned 0x3
	[0188.807] WbemDefPath:IUnknown:Release (This=0x57ace58) returned 0x2
	[0188.807] WbemDefPath:IWbemPath:SetText (This=0x57ace58, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"") returned 0x0
	[0188.807] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f0 | out: puCount=0x19f2f0*=0x2) returned 0x0
	[0188.807] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0x0, pszText=0x0 | out: puBuffLength=0x19f2ec*=0xf, pszText=0x0) returned 0x0
	[0188.807] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0188.807] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.807] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b8*=0xf, pszText=0x0) returned 0x0
	[0188.808] IWbemClassObject:Get (in: This=0x582bb80, wszName="ProcessId", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a15050*=0, plFlavor=0x2a15054*=0 | out: pVal=0x19f2b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xddc, varVal2=0x0), pType=0x2a15050*=19, plFlavor=0x2a15054*=0) returned 0x0
	[0188.808] IWbemClassObject:Get (in: This=0x582bb80, wszName="ProcessId", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a15050*=19, plFlavor=0x2a15054*=0 | out: pVal=0x19f2c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xddc, varVal2=0x0), pType=0x2a15050*=19, plFlavor=0x2a15054*=0) returned 0x0
	[0188.808] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.808] IWbemClassObject:Get (in: This=0x582bb80, wszName="Name", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a15154*=0, plFlavor=0x2a15158*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="especially safe foot.exe", varVal2=0x0), pType=0x2a15154*=8, plFlavor=0x2a15158*=0) returned 0x0
	[0188.808] IWbemClassObject:Get (in: This=0x582bb80, wszName="Name", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a15154*=8, plFlavor=0x2a15158*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="especially safe foot.exe", varVal2=0x0), pType=0x2a15154*=8, plFlavor=0x2a15158*=0) returned 0x0
	[0188.808] IWbemClassObject:Get (in: This=0x582bb80, wszName="CommandLine", lFlags=0, pVal=0x19f2b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a152c8*=0, plFlavor=0x2a152cc*=0 | out: pVal=0x19f2b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\MSBuild\\especially safe foot.exe\" ", varVal2=0x0), pType=0x2a152c8*=8, plFlavor=0x2a152cc*=0) returned 0x0
	[0188.808] IWbemClassObject:Get (in: This=0x582bb80, wszName="CommandLine", lFlags=0, pVal=0x19f2c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a152c8*=8, plFlavor=0x2a152cc*=0 | out: pVal=0x19f2c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"C:\\Program Files\\MSBuild\\especially safe foot.exe\" ", varVal2=0x0), pType=0x2a152c8*=8, plFlavor=0x2a152cc*=0) returned 0x0
	[0188.809] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.809] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x582ad28, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.810] IUnknown:QueryInterface (in: This=0x582ad28, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582ad28) returned 0x0
	[0188.810] IUnknown:QueryInterface (in: This=0x582ad28, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8e4 | out: ppvObject=0x19e8e4*=0x0) returned 0x80004002
	[0188.810] IUnknown:QueryInterface (in: This=0x582ad28, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e704 | out: ppvObject=0x19e704*=0x0) returned 0x80004002
	[0188.810] IUnknown:QueryInterface (in: This=0x582ad28, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4dc | out: ppvObject=0x19e4dc*=0x0) returned 0x80004002
	[0188.810] IUnknown:AddRef (This=0x582ad28) returned 0x3
	[0188.810] IUnknown:QueryInterface (in: This=0x582ad28, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e244 | out: ppvObject=0x19e244*=0x0) returned 0x80004002
	[0188.810] IUnknown:QueryInterface (in: This=0x582ad28, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1f4 | out: ppvObject=0x19e1f4*=0x0) returned 0x80004002
	[0188.810] IUnknown:QueryInterface (in: This=0x582ad28, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e200 | out: ppvObject=0x19e200*=0x582ad2c) returned 0x0
	[0188.810] IMarshal:GetUnmarshalClass (in: This=0x582ad2c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.810] IUnknown:Release (This=0x582ad2c) returned 0x3
	[0188.810] IUnknown:QueryInterface (in: This=0x582ad28, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f8 | out: ppvObject=0x19e6f8*=0x0) returned 0x80004002
	[0188.811] IUnknown:Release (This=0x582ad28) returned 0x2
	[0188.811] IUnknown:QueryInterface (in: This=0x582ad28, riid=0x19ec68*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x582ad28) returned 0x0
	[0188.811] IUnknown:AddRef (This=0x582ad28) returned 0x4
	[0188.811] IUnknown:Release (This=0x582ad28) returned 0x3
	[0188.811] IUnknown:Release (This=0x582ad28) returned 0x2
	[0188.811] CoTaskMemFree (pv=0x57a2d58) 
	[0188.811] IUnknown:AddRef (This=0x582ad28) returned 0x3
	[0188.811] IWbemClassObject:Get (in: This=0x582ad28, wszName="__GENUS", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f334*=0, plFlavor=0x19f330*=0 | out: pVal=0x19f2b4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f334*=3, plFlavor=0x19f330*=64) returned 0x0
	[0188.811] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.811] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.812] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.812] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.812] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.812] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.812] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57acde8) returned 0x0
	[0188.813] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.813] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acde8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57acde8) returned 0x0
	[0188.813] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x583c530, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0188.813] WbemDefPath:IUnknown:Release (This=0x583c530) returned 0x3
	[0188.813] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.813] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.813] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x582bd18, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.814] IUnknown:QueryInterface (in: This=0x582bd18, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582bd18) returned 0x0
	[0188.815] IMarshal:GetUnmarshalClass (in: This=0x582bd1c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.815] IUnknown:Release (This=0x582bd1c) returned 0x3
	[0188.815] CoTaskMemFree (pv=0x57a2d58) 
	[0188.815] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.815] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.815] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.815] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.816] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0188.816] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.816] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57acd08) returned 0x0
	[0188.816] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0188.816] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acd08, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57acd08) returned 0x0
	[0188.817] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.818] CoTaskMemAlloc (cb=0x4) returned 0x57a2cd8
	[0188.818] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2cd8, puReturned=0x29fc548 | out: apObjects=0x57a2cd8*=0x582beb0, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.820] IUnknown:QueryInterface (in: This=0x582beb0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582beb0) returned 0x0
	[0188.820] IMarshal:GetUnmarshalClass (in: This=0x582beb4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.820] IUnknown:Release (This=0x582beb4) returned 0x3
	[0188.820] CoTaskMemFree (pv=0x57a2cd8) 
	[0188.821] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.821] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.821] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.821] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.822] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.822] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.822] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x57acd78) returned 0x0
	[0188.822] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.822] WbemDefPath:IUnknown:QueryInterface (in: This=0x57acd78, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x57acd78) returned 0x0
	[0188.822] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.823] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.823] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x582aec0, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.824] IUnknown:QueryInterface (in: This=0x582aec0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582aec0) returned 0x0
	[0188.824] IMarshal:GetUnmarshalClass (in: This=0x582aec4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.824] IUnknown:Release (This=0x582aec4) returned 0x3
	[0188.824] CoTaskMemFree (pv=0x57a2d58) 
	[0188.824] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.824] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.824] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.830] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.831] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.831] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.831] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x7038b0) returned 0x0
	[0188.832] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.832] WbemDefPath:IUnknown:QueryInterface (in: This=0x7038b0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x7038b0) returned 0x0
	[0188.832] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.832] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.832] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x582b058, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.834] IUnknown:QueryInterface (in: This=0x582b058, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582b058) returned 0x0
	[0188.835] IMarshal:GetUnmarshalClass (in: This=0x582b05c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.835] IUnknown:Release (This=0x582b05c) returned 0x3
	[0188.835] CoTaskMemFree (pv=0x57a2d58) 
	[0188.835] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.835] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.835] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.835] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.836] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.837] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.837] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845308) returned 0x0
	[0188.837] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.837] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845308, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845308) returned 0x0
	[0188.840] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.841] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.841] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x582c048, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.845] IUnknown:QueryInterface (in: This=0x582c048, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582c048) returned 0x0
	[0188.845] IMarshal:GetUnmarshalClass (in: This=0x582c04c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.845] IUnknown:Release (This=0x582c04c) returned 0x3
	[0188.846] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.846] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.846] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.846] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.846] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.847] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.847] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.847] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x58455a8) returned 0x0
	[0188.848] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.848] WbemDefPath:IUnknown:QueryInterface (in: This=0x58455a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x58455a8) returned 0x0
	[0188.848] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.848] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.848] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x582b1f0, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.862] IUnknown:QueryInterface (in: This=0x582b1f0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582b1f0) returned 0x0
	[0188.863] IMarshal:GetUnmarshalClass (in: This=0x582b1f4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.863] IUnknown:Release (This=0x582b1f4) returned 0x3
	[0188.863] CoTaskMemFree (pv=0x57a2d58) 
	[0188.863] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.863] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.863] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.863] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.864] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0188.864] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.865] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x58451b8) returned 0x0
	[0188.865] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0188.865] WbemDefPath:IUnknown:QueryInterface (in: This=0x58451b8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x58451b8) returned 0x0
	[0188.866] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.866] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.866] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x582c1e0, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.867] IUnknown:QueryInterface (in: This=0x582c1e0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582c1e0) returned 0x0
	[0188.867] IMarshal:GetUnmarshalClass (in: This=0x582c1e4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.867] IUnknown:Release (This=0x582c1e4) returned 0x3
	[0188.867] CoTaskMemFree (pv=0x57a2d58) 
	[0188.867] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.867] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.867] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.867] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.868] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e18) returned 0x0
	[0188.868] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e18, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.868] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e18, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x58457d8) returned 0x0
	[0188.869] WbemDefPath:IUnknown:Release (This=0x57a2e18) returned 0x0
	[0188.869] WbemDefPath:IUnknown:QueryInterface (in: This=0x58457d8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x58457d8) returned 0x0
	[0188.869] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.869] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.869] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x582a860, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.870] IUnknown:QueryInterface (in: This=0x582a860, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582a860) returned 0x0
	[0188.871] IMarshal:GetUnmarshalClass (in: This=0x582a864, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.871] IUnknown:Release (This=0x582a864) returned 0x3
	[0188.871] CoTaskMemFree (pv=0x57a2d58) 
	[0188.871] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.871] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.871] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.871] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.872] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.872] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.872] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845a08) returned 0x0
	[0188.872] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.873] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845a08, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845a08) returned 0x0
	[0188.873] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.873] CoTaskMemAlloc (cb=0x4) returned 0x57a2e18
	[0188.873] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e18, puReturned=0x29fc548 | out: apObjects=0x57a2e18*=0x582b388, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.874] IUnknown:QueryInterface (in: This=0x582b388, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x582b388) returned 0x0
	[0188.874] IMarshal:GetUnmarshalClass (in: This=0x582b38c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.874] IUnknown:Release (This=0x582b38c) returned 0x3
	[0188.874] CoTaskMemFree (pv=0x57a2e18) 
	[0188.874] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.877] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.877] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.877] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.877] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.878] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.878] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845148) returned 0x0
	[0188.878] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.878] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845148, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845148) returned 0x0
	[0188.878] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.879] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0188.879] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x29fc548 | out: apObjects=0x57a2ea8*=0x584a2f0, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.881] IUnknown:QueryInterface (in: This=0x584a2f0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x584a2f0) returned 0x0
	[0188.881] IMarshal:GetUnmarshalClass (in: This=0x584a2f4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.881] IUnknown:Release (This=0x584a2f4) returned 0x3
	[0188.881] CoTaskMemFree (pv=0x57a2ea8) 
	[0188.881] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.881] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.881] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.881] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.882] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e18) returned 0x0
	[0188.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e18, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.883] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e18, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845298) returned 0x0
	[0188.883] WbemDefPath:IUnknown:Release (This=0x57a2e18) returned 0x0
	[0188.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845298, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845298) returned 0x0
	[0188.883] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.883] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0188.883] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x584a158, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.884] IUnknown:QueryInterface (in: This=0x584a158, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x584a158) returned 0x0
	[0188.884] IMarshal:GetUnmarshalClass (in: This=0x584a15c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.884] IUnknown:Release (This=0x584a15c) returned 0x3
	[0188.885] CoTaskMemFree (pv=0x57a2e68) 
	[0188.885] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.885] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.885] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.885] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.886] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2de8) returned 0x0
	[0188.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.886] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2de8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845a78) returned 0x0
	[0188.886] WbemDefPath:IUnknown:Release (This=0x57a2de8) returned 0x0
	[0188.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845a78, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845a78) returned 0x0
	[0188.886] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.887] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.887] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5849fc0, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.887] IUnknown:QueryInterface (in: This=0x5849fc0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5849fc0) returned 0x0
	[0188.888] IMarshal:GetUnmarshalClass (in: This=0x5849fc4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.888] IUnknown:Release (This=0x5849fc4) returned 0x3
	[0188.889] CoTaskMemFree (pv=0x57a2d58) 
	[0188.889] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.889] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.889] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.889] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.890] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.891] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845df8) returned 0x0
	[0188.891] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845df8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845df8) returned 0x0
	[0188.891] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.891] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.891] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5848ca0, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.894] IUnknown:QueryInterface (in: This=0x5848ca0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5848ca0) returned 0x0
	[0188.894] IMarshal:GetUnmarshalClass (in: This=0x5848ca4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.894] IUnknown:Release (This=0x5848ca4) returned 0x3
	[0188.894] CoTaskMemFree (pv=0x57a2d58) 
	[0188.894] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.894] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.894] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.894] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.895] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.895] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.895] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845ca8) returned 0x0
	[0188.895] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.895] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845ca8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845ca8) returned 0x0
	[0188.896] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.896] CoTaskMemAlloc (cb=0x4) returned 0x57a2cd8
	[0188.896] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2cd8, puReturned=0x29fc548 | out: apObjects=0x57a2cd8*=0x5849300, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.899] IUnknown:QueryInterface (in: This=0x5849300, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5849300) returned 0x0
	[0188.900] IMarshal:GetUnmarshalClass (in: This=0x5849304, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.900] IUnknown:Release (This=0x5849304) returned 0x3
	[0188.900] CoTaskMemFree (pv=0x57a2cd8) 
	[0188.900] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.900] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.901] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.901] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.920] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.920] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.920] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845848) returned 0x0
	[0188.920] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.920] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845848, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845848) returned 0x0
	[0188.921] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.921] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0188.921] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x58484a8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.928] IUnknown:QueryInterface (in: This=0x58484a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x58484a8) returned 0x0
	[0188.928] IMarshal:GetUnmarshalClass (in: This=0x58484ac, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.928] IUnknown:Release (This=0x58484ac) returned 0x3
	[0188.928] CoTaskMemFree (pv=0x57a2e68) 
	[0188.929] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.929] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.929] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.929] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.930] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.933] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.933] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845ae8) returned 0x0
	[0188.933] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.933] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845ae8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845ae8) returned 0x0
	[0188.933] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.933] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.933] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x5848640, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.934] IUnknown:QueryInterface (in: This=0x5848640, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5848640) returned 0x0
	[0188.934] IMarshal:GetUnmarshalClass (in: This=0x5848644, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.934] IUnknown:Release (This=0x5848644) returned 0x3
	[0188.935] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.935] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.935] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.935] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.935] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.936] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0188.936] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.936] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845068) returned 0x0
	[0188.936] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0188.936] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845068, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845068) returned 0x0
	[0188.936] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.937] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.937] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x58497c8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.939] IUnknown:QueryInterface (in: This=0x58497c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x58497c8) returned 0x0
	[0188.939] IMarshal:GetUnmarshalClass (in: This=0x58497cc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.939] IUnknown:Release (This=0x58497cc) returned 0x3
	[0188.940] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.940] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.940] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.940] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.940] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.942] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.942] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.942] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x58458b8) returned 0x0
	[0188.942] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0188.942] WbemDefPath:IUnknown:QueryInterface (in: This=0x58458b8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x58458b8) returned 0x0
	[0188.942] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.943] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0188.943] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x5849af8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.943] IUnknown:QueryInterface (in: This=0x5849af8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5849af8) returned 0x0
	[0188.944] IMarshal:GetUnmarshalClass (in: This=0x5849afc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.944] IUnknown:Release (This=0x5849afc) returned 0x3
	[0188.944] CoTaskMemFree (pv=0x57a2dd8) 
	[0188.944] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.944] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.944] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.944] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.945] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.945] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.945] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845bc8) returned 0x0
	[0188.945] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0188.945] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845bc8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845bc8) returned 0x0
	[0188.946] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.946] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.946] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x58487d8, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.947] IUnknown:QueryInterface (in: This=0x58487d8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x58487d8) returned 0x0
	[0188.947] IMarshal:GetUnmarshalClass (in: This=0x58487dc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.947] IUnknown:Release (This=0x58487dc) returned 0x3
	[0188.947] CoTaskMemFree (pv=0x57a2d58) 
	[0188.947] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.947] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.947] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.947] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.948] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e18) returned 0x0
	[0188.948] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e18, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.948] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e18, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845458) returned 0x0
	[0188.949] WbemDefPath:IUnknown:Release (This=0x57a2e18) returned 0x0
	[0188.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845458, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845458) returned 0x0
	[0188.949] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2bc | out: puCount=0x19f2bc*=0x2) returned 0x0
	[0188.949] CoTaskMemAlloc (cb=0x4) returned 0x57a2de8
	[0188.949] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2de8, puReturned=0x29fc548 | out: apObjects=0x57a2de8*=0x5848970, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.952] IUnknown:QueryInterface (in: This=0x5848970, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5848970) returned 0x0
	[0188.952] IMarshal:GetUnmarshalClass (in: This=0x5848974, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.952] IUnknown:Release (This=0x5848974) returned 0x3
	[0188.952] CoTaskMemFree (pv=0x57a2de8) 
	[0188.952] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.952] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.952] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.952] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.953] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0188.953] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.953] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845688) returned 0x0
	[0188.953] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0188.953] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845688, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845688) returned 0x0
	[0188.954] CoTaskMemAlloc (cb=0x4) returned 0x57a2e18
	[0188.954] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e18, puReturned=0x29fc548 | out: apObjects=0x57a2e18*=0x5849630, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.955] IUnknown:QueryInterface (in: This=0x5849630, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5849630) returned 0x0
	[0188.956] IMarshal:GetUnmarshalClass (in: This=0x5849634, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.956] IUnknown:Release (This=0x5849634) returned 0x3
	[0188.956] CoTaskMemFree (pv=0x57a2e18) 
	[0188.956] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.956] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.956] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.956] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.956] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0188.957] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.957] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845228) returned 0x0
	[0188.957] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0188.959] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845228, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845228) returned 0x0
	[0188.959] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0188.960] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x29fc548 | out: apObjects=0x57a2ea8*=0x5848b08, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.960] IUnknown:QueryInterface (in: This=0x5848b08, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5848b08) returned 0x0
	[0188.961] IMarshal:GetUnmarshalClass (in: This=0x5848b0c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.961] IUnknown:Release (This=0x5848b0c) returned 0x3
	[0188.961] CoTaskMemFree (pv=0x57a2ea8) 
	[0188.961] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.961] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.961] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.961] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.962] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.962] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845378) returned 0x0
	[0188.962] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0188.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845378, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845378) returned 0x0
	[0188.963] CoTaskMemAlloc (cb=0x4) returned 0x57a2ce8
	[0188.963] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2ce8, puReturned=0x29fc548 | out: apObjects=0x57a2ce8*=0x5848e38, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.963] IUnknown:QueryInterface (in: This=0x5848e38, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5848e38) returned 0x0
	[0188.964] IMarshal:GetUnmarshalClass (in: This=0x5848e3c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.964] IUnknown:Release (This=0x5848e3c) returned 0x3
	[0188.964] CoTaskMemFree (pv=0x57a2ce8) 
	[0188.964] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.964] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.964] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.964] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.965] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.965] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.965] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x58454c8) returned 0x0
	[0188.965] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0188.965] WbemDefPath:IUnknown:QueryInterface (in: This=0x58454c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x58454c8) returned 0x0
	[0188.965] CoTaskMemAlloc (cb=0x4) returned 0x57a2cd8
	[0188.965] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2cd8, puReturned=0x29fc548 | out: apObjects=0x57a2cd8*=0x5848fd0, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.967] IUnknown:QueryInterface (in: This=0x5848fd0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5848fd0) returned 0x0
	[0188.967] IMarshal:GetUnmarshalClass (in: This=0x5848fd4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.967] IUnknown:Release (This=0x5848fd4) returned 0x3
	[0188.967] CoTaskMemFree (pv=0x57a2cd8) 
	[0188.967] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.967] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.967] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.967] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.968] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e18) returned 0x0
	[0188.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e18, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.968] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e18, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845928) returned 0x0
	[0188.968] WbemDefPath:IUnknown:Release (This=0x57a2e18) returned 0x0
	[0188.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845928, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845928) returned 0x0
	[0188.968] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0188.969] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x5849960, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.969] IUnknown:QueryInterface (in: This=0x5849960, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5849960) returned 0x0
	[0188.970] IMarshal:GetUnmarshalClass (in: This=0x5849964, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.970] IUnknown:Release (This=0x5849964) returned 0x3
	[0188.970] CoTaskMemFree (pv=0x57a2e68) 
	[0188.970] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.970] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.970] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.970] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.970] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0188.971] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.971] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845768) returned 0x0
	[0188.971] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0188.971] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845768, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845768) returned 0x0
	[0188.971] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0188.971] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x5849168, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.972] IUnknown:QueryInterface (in: This=0x5849168, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5849168) returned 0x0
	[0188.972] IMarshal:GetUnmarshalClass (in: This=0x584916c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.972] IUnknown:Release (This=0x584916c) returned 0x3
	[0188.973] CoTaskMemFree (pv=0x57a2e68) 
	[0188.973] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.973] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.973] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.973] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.973] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e18) returned 0x0
	[0188.973] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e18, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.973] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e18, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845998) returned 0x0
	[0188.974] WbemDefPath:IUnknown:Release (This=0x57a2e18) returned 0x0
	[0188.974] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845998, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845998) returned 0x0
	[0188.974] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0188.974] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5849498, puReturned=0x29fc548*=0x1) returned 0x0
	[0188.975] IUnknown:QueryInterface (in: This=0x5849498, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5849498) returned 0x0
	[0188.975] IMarshal:GetUnmarshalClass (in: This=0x584949c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0188.975] IUnknown:Release (This=0x584949c) returned 0x3
	[0188.975] CoTaskMemFree (pv=0x57a2d58) 
	[0188.975] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0188.975] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0188.975] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0188.975] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0188.976] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0188.976] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0188.976] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x58456f8) returned 0x0
	[0189.019] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0189.019] WbemDefPath:IUnknown:QueryInterface (in: This=0x58456f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x58456f8) returned 0x0
	[0189.019] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0189.019] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5849c90, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.028] IUnknown:QueryInterface (in: This=0x5849c90, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5849c90) returned 0x0
	[0189.029] IMarshal:GetUnmarshalClass (in: This=0x5849c94, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.029] IUnknown:Release (This=0x5849c94) returned 0x3
	[0189.030] CoTaskMemFree (pv=0x57a2d58) 
	[0189.030] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.030] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.030] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.030] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.031] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0189.031] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.031] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845c38) returned 0x0
	[0189.032] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0189.032] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845c38, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845c38) returned 0x0
	[0189.032] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0189.032] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x5849e28, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.033] IUnknown:QueryInterface (in: This=0x5849e28, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5849e28) returned 0x0
	[0189.033] IMarshal:GetUnmarshalClass (in: This=0x5849e2c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.033] IUnknown:Release (This=0x5849e2c) returned 0x3
	[0189.034] CoTaskMemFree (pv=0x57a2e68) 
	[0189.034] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.034] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.034] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.034] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.034] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0189.035] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.035] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x58453e8) returned 0x0
	[0189.035] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0189.035] WbemDefPath:IUnknown:QueryInterface (in: This=0x58453e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x58453e8) returned 0x0
	[0189.035] CoTaskMemAlloc (cb=0x4) returned 0x57a2cd8
	[0189.035] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2cd8, puReturned=0x29fc548 | out: apObjects=0x57a2cd8*=0x5854648, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.040] IUnknown:QueryInterface (in: This=0x5854648, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5854648) returned 0x0
	[0189.040] IMarshal:GetUnmarshalClass (in: This=0x585464c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.040] IUnknown:Release (This=0x585464c) returned 0x3
	[0189.040] CoTaskMemFree (pv=0x57a2cd8) 
	[0189.041] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.041] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.041] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.041] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.041] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0189.042] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.042] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x58450d8) returned 0x0
	[0189.042] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0189.042] WbemDefPath:IUnknown:QueryInterface (in: This=0x58450d8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x58450d8) returned 0x0
	[0189.042] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0189.042] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x5853658, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.043] IUnknown:QueryInterface (in: This=0x5853658, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5853658) returned 0x0
	[0189.044] IMarshal:GetUnmarshalClass (in: This=0x585365c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.044] IUnknown:Release (This=0x585365c) returned 0x3
	[0189.044] CoTaskMemFree (pv=0x57a2dd8) 
	[0189.044] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.044] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.044] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.044] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.045] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0189.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.045] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845538) returned 0x0
	[0189.045] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0189.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845538, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845538) returned 0x0
	[0189.045] CoTaskMemAlloc (cb=0x4) returned 0x57a2eb8
	[0189.045] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2eb8, puReturned=0x29fc548 | out: apObjects=0x57a2eb8*=0x5853e50, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.046] IUnknown:QueryInterface (in: This=0x5853e50, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5853e50) returned 0x0
	[0189.046] IMarshal:GetUnmarshalClass (in: This=0x5853e54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.047] IUnknown:Release (This=0x5853e54) returned 0x3
	[0189.047] CoTaskMemFree (pv=0x57a2eb8) 
	[0189.049] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.049] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.049] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.049] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.050] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0189.050] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.050] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845618) returned 0x0
	[0189.050] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0189.050] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845618, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845618) returned 0x0
	[0189.050] CoTaskMemAlloc (cb=0x4) returned 0x57a2e18
	[0189.050] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e18, puReturned=0x29fc548 | out: apObjects=0x57a2e18*=0x5852e60, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.052] IUnknown:QueryInterface (in: This=0x5852e60, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5852e60) returned 0x0
	[0189.052] IMarshal:GetUnmarshalClass (in: This=0x5852e64, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.052] IUnknown:Release (This=0x5852e64) returned 0x3
	[0189.052] CoTaskMemFree (pv=0x57a2e18) 
	[0189.052] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.053] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.053] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.053] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.053] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0189.079] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.079] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845b58) returned 0x0
	[0189.080] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0189.080] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845b58, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845b58) returned 0x0
	[0189.080] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0189.080] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5853cb8, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.081] IUnknown:QueryInterface (in: This=0x5853cb8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5853cb8) returned 0x0
	[0189.082] IMarshal:GetUnmarshalClass (in: This=0x5853cbc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.082] IUnknown:Release (This=0x5853cbc) returned 0x3
	[0189.082] CoTaskMemFree (pv=0x57a2d58) 
	[0189.082] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.082] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.082] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.082] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.083] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0189.083] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.083] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845d18) returned 0x0
	[0189.083] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0189.083] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845d18, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845d18) returned 0x0
	[0189.084] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0189.084] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5852ff8, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.085] IUnknown:QueryInterface (in: This=0x5852ff8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5852ff8) returned 0x0
	[0189.085] IMarshal:GetUnmarshalClass (in: This=0x5852ffc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.085] IUnknown:Release (This=0x5852ffc) returned 0x3
	[0189.085] CoTaskMemFree (pv=0x57a2d58) 
	[0189.086] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.086] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.086] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.086] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.086] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0189.087] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.087] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845d88) returned 0x0
	[0189.087] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0189.087] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845d88, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845d88) returned 0x0
	[0189.087] CoTaskMemAlloc (cb=0x4) returned 0x57a2de8
	[0189.087] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2de8, puReturned=0x29fc548 | out: apObjects=0x57a2de8*=0x58544b0, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.088] IUnknown:QueryInterface (in: This=0x58544b0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x58544b0) returned 0x0
	[0189.088] IMarshal:GetUnmarshalClass (in: This=0x58544b4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.088] IUnknown:Release (This=0x58544b4) returned 0x3
	[0189.088] CoTaskMemFree (pv=0x57a2de8) 
	[0189.088] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.089] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.089] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.089] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.089] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0189.089] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.089] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845e68) returned 0x0
	[0189.089] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0189.089] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845e68, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845e68) returned 0x0
	[0189.090] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0189.090] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x29fc548 | out: apObjects=0x57a2ea8*=0x5853988, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.090] IUnknown:QueryInterface (in: This=0x5853988, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5853988) returned 0x0
	[0189.091] IMarshal:GetUnmarshalClass (in: This=0x585398c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.091] IUnknown:Release (This=0x585398c) returned 0x3
	[0189.091] CoTaskMemFree (pv=0x57a2ea8) 
	[0189.091] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.091] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.091] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.091] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.093] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0189.093] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.093] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845ed8) returned 0x0
	[0189.093] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0189.093] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845ed8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845ed8) returned 0x0
	[0189.094] CoTaskMemAlloc (cb=0x4) returned 0x57a2e18
	[0189.094] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e18, puReturned=0x29fc548 | out: apObjects=0x57a2e18*=0x58534c0, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.094] IUnknown:QueryInterface (in: This=0x58534c0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x58534c0) returned 0x0
	[0189.095] IMarshal:GetUnmarshalClass (in: This=0x58534c4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.095] IUnknown:Release (This=0x58534c4) returned 0x3
	[0189.095] CoTaskMemFree (pv=0x57a2e18) 
	[0189.095] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.095] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.095] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.095] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.095] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0189.163] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.163] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845f48) returned 0x0
	[0189.164] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0189.164] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845f48, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845f48) returned 0x0
	[0189.164] CoTaskMemAlloc (cb=0x4) returned 0x57a2e18
	[0189.164] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e18, puReturned=0x29fc548 | out: apObjects=0x57a2e18*=0x5854318, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.165] IUnknown:QueryInterface (in: This=0x5854318, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5854318) returned 0x0
	[0189.165] IMarshal:GetUnmarshalClass (in: This=0x585431c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.165] IUnknown:Release (This=0x585431c) returned 0x3
	[0189.165] CoTaskMemFree (pv=0x57a2e18) 
	[0189.165] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.166] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.166] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.166] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.166] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2de8) returned 0x0
	[0189.166] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.166] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2de8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x5845fb8) returned 0x0
	[0189.166] WbemDefPath:IUnknown:Release (This=0x57a2de8) returned 0x0
	[0189.166] WbemDefPath:IUnknown:QueryInterface (in: This=0x5845fb8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x5845fb8) returned 0x0
	[0189.168] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0189.168] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5853b20, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.168] IUnknown:QueryInterface (in: This=0x5853b20, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5853b20) returned 0x0
	[0189.168] IMarshal:GetUnmarshalClass (in: This=0x5853b24, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.169] IUnknown:Release (This=0x5853b24) returned 0x3
	[0189.169] CoTaskMemFree (pv=0x57a2d58) 
	[0189.169] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.169] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.169] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.169] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.169] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e68) returned 0x0
	[0189.170] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.170] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e68, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b1e8) returned 0x0
	[0189.170] WbemDefPath:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0189.170] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b1e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b1e8) returned 0x0
	[0189.171] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0189.171] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x58537f0, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.171] IUnknown:QueryInterface (in: This=0x58537f0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x58537f0) returned 0x0
	[0189.172] IMarshal:GetUnmarshalClass (in: This=0x58537f4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.172] IUnknown:Release (This=0x58537f4) returned 0x3
	[0189.172] CoTaskMemFree (pv=0x57a2d58) 
	[0189.172] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.172] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.172] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.172] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.172] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2de8) returned 0x0
	[0189.173] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.173] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2de8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585bb88) returned 0x0
	[0189.173] WbemDefPath:IUnknown:Release (This=0x57a2de8) returned 0x0
	[0189.173] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bb88, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585bb88) returned 0x0
	[0189.173] CoTaskMemAlloc (cb=0x4) returned 0x57a2ce8
	[0189.173] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2ce8, puReturned=0x29fc548 | out: apObjects=0x57a2ce8*=0x5853fe8, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.175] IUnknown:QueryInterface (in: This=0x5853fe8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5853fe8) returned 0x0
	[0189.175] IMarshal:GetUnmarshalClass (in: This=0x5853fec, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.175] IUnknown:Release (This=0x5853fec) returned 0x3
	[0189.175] CoTaskMemFree (pv=0x57a2ce8) 
	[0189.176] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.176] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.176] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.176] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.176] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0189.177] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.177] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b798) returned 0x0
	[0189.177] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0189.177] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b798, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b798) returned 0x0
	[0189.177] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0189.177] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x58547e0, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.192] IUnknown:QueryInterface (in: This=0x58547e0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x58547e0) returned 0x0
	[0189.192] IMarshal:GetUnmarshalClass (in: This=0x58547e4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.192] IUnknown:Release (This=0x58547e4) returned 0x3
	[0189.192] CoTaskMemFree (pv=0x57a2d58) 
	[0189.192] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.193] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.193] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.193] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.193] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2de8) returned 0x0
	[0189.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.228] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2de8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b4f8) returned 0x0
	[0189.228] WbemDefPath:IUnknown:Release (This=0x57a2de8) returned 0x0
	[0189.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b4f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b4f8) returned 0x0
	[0189.229] CoTaskMemAlloc (cb=0x4) returned 0x57a2de8
	[0189.229] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2de8, puReturned=0x29fc548 | out: apObjects=0x57a2de8*=0x5854978, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.229] IUnknown:QueryInterface (in: This=0x5854978, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5854978) returned 0x0
	[0189.229] IMarshal:GetUnmarshalClass (in: This=0x585497c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.229] IUnknown:Release (This=0x585497c) returned 0x3
	[0189.230] CoTaskMemFree (pv=0x57a2de8) 
	[0189.230] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.230] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.230] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.230] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.230] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0189.231] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.231] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b178) returned 0x0
	[0189.231] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0189.231] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b178, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b178) returned 0x0
	[0189.231] CoTaskMemAlloc (cb=0x4) returned 0x57a2de8
	[0189.231] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2de8, puReturned=0x29fc548 | out: apObjects=0x57a2de8*=0x5854b10, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.232] IUnknown:QueryInterface (in: This=0x5854b10, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5854b10) returned 0x0
	[0189.232] IMarshal:GetUnmarshalClass (in: This=0x5854b14, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.232] IUnknown:Release (This=0x5854b14) returned 0x3
	[0189.232] CoTaskMemFree (pv=0x57a2de8) 
	[0189.232] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.233] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.233] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.233] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.233] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2de8) returned 0x0
	[0189.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2de8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.233] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2de8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b8e8) returned 0x0
	[0189.233] WbemDefPath:IUnknown:Release (This=0x57a2de8) returned 0x0
	[0189.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b8e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b8e8) returned 0x0
	[0189.234] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0189.234] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5854ca8, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.235] IUnknown:QueryInterface (in: This=0x5854ca8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5854ca8) returned 0x0
	[0189.235] IMarshal:GetUnmarshalClass (in: This=0x5854cac, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.235] IUnknown:Release (This=0x5854cac) returned 0x3
	[0189.235] CoTaskMemFree (pv=0x57a2d58) 
	[0189.235] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.235] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.235] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.235] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.236] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0189.236] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.236] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b258) returned 0x0
	[0189.236] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0189.236] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b258, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b258) returned 0x0
	[0189.236] CoTaskMemAlloc (cb=0x4) returned 0x57a2de8
	[0189.236] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2de8, puReturned=0x29fc548 | out: apObjects=0x57a2de8*=0x5854180, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.237] IUnknown:QueryInterface (in: This=0x5854180, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5854180) returned 0x0
	[0189.237] IMarshal:GetUnmarshalClass (in: This=0x5854184, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.237] IUnknown:Release (This=0x5854184) returned 0x3
	[0189.237] CoTaskMemFree (pv=0x57a2de8) 
	[0189.237] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.237] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.237] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.238] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.239] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2e18) returned 0x0
	[0189.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e18, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.239] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e18, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b338) returned 0x0
	[0189.239] WbemDefPath:IUnknown:Release (This=0x57a2e18) returned 0x0
	[0189.240] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b338, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b338) returned 0x0
	[0189.240] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0189.240] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x29fc548 | out: apObjects=0x57a2d58*=0x5853190, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.240] IUnknown:QueryInterface (in: This=0x5853190, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5853190) returned 0x0
	[0189.240] IMarshal:GetUnmarshalClass (in: This=0x5853194, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.240] IUnknown:Release (This=0x5853194) returned 0x3
	[0189.241] CoTaskMemFree (pv=0x57a2d58) 
	[0189.241] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.241] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.241] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.241] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.241] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2d58) returned 0x0
	[0189.241] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.241] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b958) returned 0x0
	[0189.241] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0189.242] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b958, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b958) returned 0x0
	[0189.242] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0189.242] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x5853328, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.242] IUnknown:QueryInterface (in: This=0x5853328, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5853328) returned 0x0
	[0189.242] IMarshal:GetUnmarshalClass (in: This=0x585332c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.242] IUnknown:Release (This=0x585332c) returned 0x3
	[0189.243] CoTaskMemFree (pv=0x57a2e68) 
	[0189.243] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.243] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.243] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.243] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.243] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2ea8) returned 0x0
	[0189.243] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.243] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b9c8) returned 0x0
	[0189.243] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0189.243] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b9c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b9c8) returned 0x0
	[0189.244] CoTaskMemAlloc (cb=0x4) returned 0x57a2de8
	[0189.244] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2de8, puReturned=0x29fc548 | out: apObjects=0x57a2de8*=0x58606d8, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.245] IUnknown:QueryInterface (in: This=0x58606d8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x58606d8) returned 0x0
	[0189.245] IMarshal:GetUnmarshalClass (in: This=0x58606dc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.245] IUnknown:Release (This=0x58606dc) returned 0x3
	[0189.331] CoTaskMemFree (pv=0x57a2de8) 
	[0189.331] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.331] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.331] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.331] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.332] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0189.332] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.332] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585be98) returned 0x0
	[0189.332] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0189.332] WbemDefPath:IUnknown:QueryInterface (in: This=0x585be98, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585be98) returned 0x0
	[0189.333] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0189.333] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x5860078, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.333] IUnknown:QueryInterface (in: This=0x5860078, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x5860078) returned 0x0
	[0189.334] IMarshal:GetUnmarshalClass (in: This=0x586007c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.334] IUnknown:Release (This=0x586007c) returned 0x3
	[0189.334] CoTaskMemFree (pv=0x57a2dd8) 
	[0189.334] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.334] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.334] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.334] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.335] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0189.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.335] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b5d8) returned 0x0
	[0189.335] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0189.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b5d8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b5d8) returned 0x0
	[0189.336] CoTaskMemAlloc (cb=0x4) returned 0x57a2dd8
	[0189.336] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2dd8, puReturned=0x29fc548 | out: apObjects=0x57a2dd8*=0x585f550, puReturned=0x29fc548*=0x1) returned 0x0
	[0189.337] IUnknown:QueryInterface (in: This=0x585f550, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e928 | out: ppvObject=0x19e928*=0x585f550) returned 0x0
	[0189.337] IMarshal:GetUnmarshalClass (in: This=0x585f554, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e208 | out: pCid=0x19e208*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0189.338] IUnknown:Release (This=0x585f554) returned 0x3
	[0189.338] CoTaskMemFree (pv=0x57a2dd8) 
	[0189.338] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c4 | out: ppv=0x19f2c4*=0x6d0ae4) returned 0x0
	[0189.338] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2bc | out: pAptType=0x19f2bc*=1) returned 0x0
	[0189.338] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2c0 | out: ppvObject=0x19f2c0*=0x0) returned 0x80004002
	[0189.340] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.341] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec30 | out: ppv=0x19ec30*=0x57a2dd8) returned 0x0
	[0189.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee48 | out: ppvObject=0x19ee48*=0x0) returned 0x80004002
	[0189.341] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2dd8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee5c | out: ppvObject=0x19ee5c*=0x585b2c8) returned 0x0
	[0189.341] WbemDefPath:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0189.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b2c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x585b2c8) returned 0x0
	[0189.342] CoTaskMemAlloc (cb=0x4) returned 0x57a2e68
	[0189.342] IEnumWbemClassObject:Next (in: This=0x78ad58, lTimeout=-1, uCount=0x1, apObjects=0x57a2e68, puReturned=0x29fc548 | out: apObjects=0x57a2e68*=0x0, puReturned=0x29fc548*=0x0) returned 0x1
	[0189.343] CoTaskMemFree (pv=0x57a2e68) 
	[0189.343] WbemLocator:IUnknown:Release (This=0x57b1cf8) returned 0x1
	[0189.343] IUnknown:Release (This=0x78ad58) returned 0x0
	[0189.344] WbemLocator:IUnknown:Release (This=0x57b05f8) returned 0x1
	[0189.344] IUnknown:Release (This=0x78a650) returned 0x0
	[0189.349] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", nBufferLength=0x105, lpBuffer=0x19edf0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", lpFilePart=0x0) returned 0x3b
	[0189.436] GetCurrentProcessId () returned 0xe4c
	[0189.436] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3707348, Length=0x20000, ResultLength=0x19f264 | out: SystemInformation=0x3707348, ResultLength=0x19f264*=0x17698) returned 0x0
	[0189.521] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f24c | out: puCount=0x19f24c*=0x2) returned 0x0
	[0189.521] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f248*=0x0, pszText=0x0 | out: puBuffLength=0x19f248*=0xf, pszText=0x0) returned 0x0
	[0189.521] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f248*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f248*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0189.521] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d8 | out: ppv=0x19f1d8*=0x6d0ae4) returned 0x0
	[0189.521] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f1d0 | out: pAptType=0x19f1d0*=1) returned 0x0
	[0189.521] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1d4 | out: ppvObject=0x19f1d4*=0x0) returned 0x80004002
	[0189.521] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0189.522] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19edf8 | out: ppv=0x19edf8*=0x5859e78) returned 0x0
	[0189.523] WbemLocator:IUnknown:QueryInterface (in: This=0x5859e78, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f010 | out: ppvObject=0x19f010*=0x0) returned 0x80004002
	[0189.523] WbemLocator:IClassFactory:CreateInstance (in: This=0x5859e78, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f024 | out: ppvObject=0x19f024*=0x57a2e68) returned 0x0
	[0189.523] WbemLocator:IUnknown:Release (This=0x5859e78) returned 0x0
	[0189.523] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec44 | out: ppvObject=0x19ec44*=0x57a2e68) returned 0x0
	[0189.523] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec00 | out: ppvObject=0x19ec00*=0x0) returned 0x80004002
	[0189.523] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7f4 | out: ppvObject=0x19e7f4*=0x0) returned 0x80004002
	[0189.523] WbemLocator:IUnknown:AddRef (This=0x57a2e68) returned 0x3
	[0189.523] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0189.523] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e50c | out: ppvObject=0x19e50c*=0x0) returned 0x80004002
	[0189.523] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e518 | out: ppvObject=0x19e518*=0x0) returned 0x80004002
	[0189.524] CoGetContextToken (in: pToken=0x19e578 | out: pToken=0x19e578) returned 0x0
	[0189.524] CoGetContextToken (in: pToken=0x19e980 | out: pToken=0x19e980) returned 0x0
	[0189.524] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea10 | out: ppvObject=0x19ea10*=0x0) returned 0x80004002
	[0189.524] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x2
	[0189.524] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x1
	[0189.524] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0189.524] CoGetContextToken (in: pToken=0x19ef50 | out: pToken=0x19ef50) returned 0x0
	[0189.524] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2e68, riid=0x19f020*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f01c | out: ppvObject=0x19f01c*=0x57a2e68) returned 0x0
	[0189.524] WbemLocator:IUnknown:AddRef (This=0x57a2e68) returned 0x3
	[0189.524] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x2
	[0189.524] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f1b4 | out: puCount=0x19f1b4*=0x2) returned 0x0
	[0189.524] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f1b0*=0x0, pszText=0x0 | out: puBuffLength=0x19f1b0*=0xf, pszText=0x0) returned 0x0
	[0189.524] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f1b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0189.524] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f08c | out: ppv=0x19f08c*=0x57a2e78) returned 0x0
	[0189.524] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2e78, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f120 | out: ppNamespace=0x19f120*=0x585ce20) returned 0x0
	[0189.563] WbemLocator:IUnknown:QueryInterface (in: This=0x585ce20, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efbc | out: ppvObject=0x19efbc*=0x57b16d4) returned 0x0
	[0189.563] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b16d4, pProxy=0x585ce20, pAuthnSvc=0x19f00c, pAuthzSvc=0x19f008, pServerPrincName=0x19f000, pAuthnLevel=0x19f004, pImpLevel=0x19eff4, pAuthInfo=0x19eff8, pCapabilites=0x19effc | out: pAuthnSvc=0x19f00c*=0xa, pAuthzSvc=0x19f008*=0x0, pServerPrincName=0x19f000, pAuthnLevel=0x19f004*=0x6, pImpLevel=0x19eff4*=0x2, pAuthInfo=0x19eff8, pCapabilites=0x19effc*=0x1) returned 0x0
	[0189.563] WbemLocator:IUnknown:Release (This=0x57b16d4) returned 0x1
	[0189.563] WbemLocator:IUnknown:QueryInterface (in: This=0x585ce20, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efb0 | out: ppvObject=0x19efb0*=0x57b16f8) returned 0x0
	[0189.563] WbemLocator:IUnknown:QueryInterface (in: This=0x585ce20, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efac | out: ppvObject=0x19efac*=0x57b16d4) returned 0x0
	[0189.564] WbemLocator:IClientSecurity:SetBlanket (This=0x57b16d4, pProxy=0x585ce20, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0189.564] WbemLocator:IUnknown:Release (This=0x57b16d4) returned 0x2
	[0189.564] WbemLocator:IUnknown:Release (This=0x57b16f8) returned 0x1
	[0189.564] CoTaskMemFree (pv=0x57b7bd0) 
	[0189.564] WbemLocator:IUnknown:Release (This=0x57a2e78) returned 0x0
	[0189.564] WbemLocator:IUnknown:QueryInterface (in: This=0x585ce20, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebac | out: ppvObject=0x19ebac*=0x57b16f8) returned 0x0
	[0189.564] WbemLocator:IUnknown:QueryInterface (in: This=0x57b16f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eb68 | out: ppvObject=0x19eb68*=0x0) returned 0x80004002
	[0189.569] WbemLocator:IUnknown:QueryInterface (in: This=0x57b16f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x0) returned 0x80004002
	[0189.571] WbemLocator:IUnknown:QueryInterface (in: This=0x585ce20, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e75c | out: ppvObject=0x19e75c*=0x0) returned 0x80004002
	[0189.572] WbemLocator:IUnknown:AddRef (This=0x57b16f8) returned 0x3
	[0189.572] WbemLocator:IUnknown:QueryInterface (in: This=0x57b16f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e4c4 | out: ppvObject=0x19e4c4*=0x0) returned 0x80004002
	[0189.572] WbemLocator:IUnknown:QueryInterface (in: This=0x57b16f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e474 | out: ppvObject=0x19e474*=0x0) returned 0x80004002
	[0189.572] WbemLocator:IUnknown:QueryInterface (in: This=0x57b16f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e480 | out: ppvObject=0x19e480*=0x57b1654) returned 0x0
	[0189.572] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1654, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e488 | out: pCid=0x19e488*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0189.572] WbemLocator:IUnknown:Release (This=0x57b1654) returned 0x3
	[0189.572] CoGetContextToken (in: pToken=0x19e4e0 | out: pToken=0x19e4e0) returned 0x0
	[0189.572] CoGetContextToken (in: pToken=0x19e8e8 | out: pToken=0x19e8e8) returned 0x0
	[0189.572] WbemLocator:IUnknown:QueryInterface (in: This=0x57b16f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e978 | out: ppvObject=0x19e978*=0x57b16dc) returned 0x0
	[0189.572] WbemLocator:IRpcOptions:Query (in: This=0x57b16dc, pPrx=0x57b16f8, dwProperty=2, pdwValue=0x19e9a0 | out: pdwValue=0x19e9a0) returned 0x80004002
	[0189.572] WbemLocator:IUnknown:Release (This=0x57b16dc) returned 0x3
	[0189.572] WbemLocator:IUnknown:Release (This=0x57b16f8) returned 0x2
	[0189.572] CoGetContextToken (in: pToken=0x19eec0 | out: pToken=0x19eec0) returned 0x0
	[0189.572] CoGetContextToken (in: pToken=0x19ee20 | out: pToken=0x19ee20) returned 0x0
	[0189.572] WbemLocator:IUnknown:QueryInterface (in: This=0x57b16f8, riid=0x19eef0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19eeec | out: ppvObject=0x19eeec*=0x585ce20) returned 0x0
	[0189.573] WbemLocator:IUnknown:AddRef (This=0x585ce20) returned 0x4
	[0189.573] WbemLocator:IUnknown:Release (This=0x585ce20) returned 0x3
	[0189.573] WbemLocator:IUnknown:Release (This=0x585ce20) returned 0x2
	[0189.573] SysStringLen (param_1=0x0) returned 0x0
	[0189.573] CoGetContextToken (in: pToken=0x19eeb8 | out: pToken=0x19eeb8) returned 0x0
	[0189.573] WbemLocator:IUnknown:AddRef (This=0x57b16f8) returned 0x3
	[0189.573] WbemLocator:IUnknown:QueryInterface (in: This=0x57b16f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed4c | out: ppvObject=0x19ed4c*=0x57b16f8) returned 0x0
	[0189.574] WbemLocator:IUnknown:Release (This=0x57b16f8) returned 0x3
	[0189.574] WbemLocator:IUnknown:Release (This=0x57b16f8) returned 0x2
	[0189.574] CoGetContextToken (in: pToken=0x19ef88 | out: pToken=0x19ef88) returned 0x0
	[0189.574] WbemLocator:IUnknown:AddRef (This=0x585ce20) returned 0x3
	[0189.574] IWbemServices:ExecQuery (in: This=0x585ce20, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Process Where SessionId='1'", lFlags=16, pCtx=0x0, ppEnum=0x19f1bc | out: ppEnum=0x19f1bc*=0x78ab00) returned 0x0
	[0189.845] IUnknown:QueryInterface (in: This=0x78ab00, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19effc | out: ppvObject=0x19effc*=0x78ab04) returned 0x0
	[0189.845] IClientSecurity:QueryBlanket (in: This=0x78ab04, pProxy=0x78ab00, pAuthnSvc=0x19f04c, pAuthzSvc=0x19f048, pServerPrincName=0x19f040, pAuthnLevel=0x19f044, pImpLevel=0x19f034, pAuthInfo=0x19f038, pCapabilites=0x19f03c | out: pAuthnSvc=0x19f04c*=0xa, pAuthzSvc=0x19f048*=0x0, pServerPrincName=0x19f040, pAuthnLevel=0x19f044*=0x6, pImpLevel=0x19f034*=0x2, pAuthInfo=0x19f038, pCapabilites=0x19f03c*=0x1) returned 0x0
	[0189.845] IUnknown:Release (This=0x78ab04) returned 0x1
	[0189.845] IUnknown:QueryInterface (in: This=0x78ab00, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eff0 | out: ppvObject=0x19eff0*=0x57b04f8) returned 0x0
	[0189.846] IUnknown:QueryInterface (in: This=0x78ab00, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efec | out: ppvObject=0x19efec*=0x78ab04) returned 0x0
	[0189.846] IClientSecurity:SetBlanket (This=0x78ab04, pProxy=0x78ab00, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0189.848] IUnknown:Release (This=0x78ab04) returned 0x2
	[0189.848] WbemLocator:IUnknown:Release (This=0x57b04f8) returned 0x1
	[0189.848] CoTaskMemFree (pv=0x57b7bd0) 
	[0189.848] IUnknown:QueryInterface (in: This=0x78ab00, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebe8 | out: ppvObject=0x19ebe8*=0x57b04f8) returned 0x0
	[0189.848] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eba4 | out: ppvObject=0x19eba4*=0x0) returned 0x80004002
	[0189.861] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9c4 | out: ppvObject=0x19e9c4*=0x0) returned 0x80004002
	[0189.862] IUnknown:QueryInterface (in: This=0x78ab00, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e79c | out: ppvObject=0x19e79c*=0x0) returned 0x80004002
	[0189.862] WbemLocator:IUnknown:AddRef (This=0x57b04f8) returned 0x3
	[0189.862] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e504 | out: ppvObject=0x19e504*=0x0) returned 0x80004002
	[0189.863] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4b4 | out: ppvObject=0x19e4b4*=0x0) returned 0x80004002
	[0189.863] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4c0 | out: ppvObject=0x19e4c0*=0x57b0454) returned 0x0
	[0189.863] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0454, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4c8 | out: pCid=0x19e4c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0189.863] WbemLocator:IUnknown:Release (This=0x57b0454) returned 0x3
	[0189.863] CoGetContextToken (in: pToken=0x19e520 | out: pToken=0x19e520) returned 0x0
	[0189.863] CoGetContextToken (in: pToken=0x19e928 | out: pToken=0x19e928) returned 0x0
	[0189.863] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9b8 | out: ppvObject=0x19e9b8*=0x57b04dc) returned 0x0
	[0189.863] WbemLocator:IRpcOptions:Query (in: This=0x57b04dc, pPrx=0x57b04f8, dwProperty=2, pdwValue=0x19e9e0 | out: pdwValue=0x19e9e0) returned 0x80004002
	[0189.863] WbemLocator:IUnknown:Release (This=0x57b04dc) returned 0x3
	[0189.863] WbemLocator:IUnknown:Release (This=0x57b04f8) returned 0x2
	[0189.863] CoGetContextToken (in: pToken=0x19eef8 | out: pToken=0x19eef8) returned 0x0
	[0189.863] CoGetContextToken (in: pToken=0x19ee58 | out: pToken=0x19ee58) returned 0x0
	[0189.863] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x19ef28*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef24 | out: ppvObject=0x19ef24*=0x78ab00) returned 0x0
	[0189.863] IUnknown:AddRef (This=0x78ab00) returned 0x4
	[0189.864] IUnknown:Release (This=0x78ab00) returned 0x3
	[0189.864] IUnknown:Release (This=0x78ab00) returned 0x2
	[0189.864] WbemLocator:IUnknown:Release (This=0x585ce20) returned 0x2
	[0189.864] SysStringLen (param_1=0x0) returned 0x0
	[0189.864] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f208 | out: puCount=0x19f208*=0x2) returned 0x0
	[0189.864] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f204*=0x0, pszText=0x0 | out: puBuffLength=0x19f204*=0xf, pszText=0x0) returned 0x0
	[0189.864] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f204*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f204*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0189.864] CoGetContextToken (in: pToken=0x19f058 | out: pToken=0x19f058) returned 0x0
	[0189.864] IUnknown:AddRef (This=0x78ab00) returned 0x3
	[0189.864] IEnumWbemClassObject:Clone (in: This=0x78ab00, ppEnum=0x19f214 | out: ppEnum=0x19f214*=0x78ae20) returned 0x0
	[0189.866] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0d8 | out: ppvObject=0x19f0d8*=0x78ae24) returned 0x0
	[0189.866] IClientSecurity:QueryBlanket (in: This=0x78ae24, pProxy=0x78ae20, pAuthnSvc=0x19f128, pAuthzSvc=0x19f124, pServerPrincName=0x19f11c, pAuthnLevel=0x19f120, pImpLevel=0x19f110, pAuthInfo=0x19f114, pCapabilites=0x19f118 | out: pAuthnSvc=0x19f128*=0xa, pAuthzSvc=0x19f124*=0x0, pServerPrincName=0x19f11c, pAuthnLevel=0x19f120*=0x6, pImpLevel=0x19f110*=0x2, pAuthInfo=0x19f114, pCapabilites=0x19f118*=0x1) returned 0x0
	[0189.866] IUnknown:Release (This=0x78ae24) returned 0x1
	[0189.866] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0cc | out: ppvObject=0x19f0cc*=0x57b13f8) returned 0x0
	[0189.866] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0c8 | out: ppvObject=0x19f0c8*=0x78ae24) returned 0x0
	[0189.866] IClientSecurity:SetBlanket (This=0x78ae24, pProxy=0x78ae20, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0189.868] IUnknown:Release (This=0x78ae24) returned 0x2
	[0189.868] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x1
	[0189.868] CoTaskMemFree (pv=0x57b7e70) 
	[0189.868] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecb4 | out: ppvObject=0x19ecb4*=0x57b13f8) returned 0x0
	[0189.868] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec70 | out: ppvObject=0x19ec70*=0x0) returned 0x80004002
	[0189.869] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea8c | out: ppvObject=0x19ea8c*=0x0) returned 0x80004002
	[0189.869] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e864 | out: ppvObject=0x19e864*=0x0) returned 0x80004002
	[0189.870] WbemLocator:IUnknown:AddRef (This=0x57b13f8) returned 0x3
	[0189.870] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5cc | out: ppvObject=0x19e5cc*=0x0) returned 0x80004002
	[0189.870] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0189.870] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e588 | out: ppvObject=0x19e588*=0x57b1354) returned 0x0
	[0189.870] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1354, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e590 | out: pCid=0x19e590*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0189.870] WbemLocator:IUnknown:Release (This=0x57b1354) returned 0x3
	[0189.870] CoGetContextToken (in: pToken=0x19e5e8 | out: pToken=0x19e5e8) returned 0x0
	[0189.870] CoGetContextToken (in: pToken=0x19e9f0 | out: pToken=0x19e9f0) returned 0x0
	[0189.870] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea80 | out: ppvObject=0x19ea80*=0x57b13dc) returned 0x0
	[0189.870] WbemLocator:IRpcOptions:Query (in: This=0x57b13dc, pPrx=0x57b13f8, dwProperty=2, pdwValue=0x19eaa8 | out: pdwValue=0x19eaa8) returned 0x80004002
	[0189.870] WbemLocator:IUnknown:Release (This=0x57b13dc) returned 0x3
	[0189.871] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x2
	[0189.871] CoGetContextToken (in: pToken=0x19efc8 | out: pToken=0x19efc8) returned 0x0
	[0189.871] CoGetContextToken (in: pToken=0x19ef28 | out: pToken=0x19ef28) returned 0x0
	[0189.871] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x19eff8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19eff4 | out: ppvObject=0x19eff4*=0x78ae20) returned 0x0
	[0189.871] IUnknown:AddRef (This=0x78ae20) returned 0x4
	[0189.871] IUnknown:Release (This=0x78ae20) returned 0x3
	[0189.871] IUnknown:Release (This=0x78ae20) returned 0x2
	[0189.871] IUnknown:Release (This=0x78ab00) returned 0x2
	[0189.871] SysStringLen (param_1=0x0) returned 0x0
	[0189.871] IEnumWbemClassObject:Reset (This=0x78ae20) returned 0x0
	[0189.872] CoTaskMemAlloc (cb=0x4) returned 0x57a2e98
	[0189.872] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2e98, puReturned=0x2a6632c | out: apObjects=0x57a2e98*=0x585f6e8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.223] IUnknown:QueryInterface (in: This=0x585f6e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585f6e8) returned 0x0
	[0190.224] IUnknown:QueryInterface (in: This=0x585f6e8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.224] IUnknown:QueryInterface (in: This=0x585f6e8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.224] IUnknown:QueryInterface (in: This=0x585f6e8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.224] IUnknown:AddRef (This=0x585f6e8) returned 0x3
	[0190.224] IUnknown:QueryInterface (in: This=0x585f6e8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.224] IUnknown:QueryInterface (in: This=0x585f6e8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.224] IUnknown:QueryInterface (in: This=0x585f6e8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585f6ec) returned 0x0
	[0190.224] IMarshal:GetUnmarshalClass (in: This=0x585f6ec, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.224] IUnknown:Release (This=0x585f6ec) returned 0x3
	[0190.224] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.224] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.224] IUnknown:QueryInterface (in: This=0x585f6e8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.224] IUnknown:Release (This=0x585f6e8) returned 0x2
	[0190.224] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.224] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.224] IUnknown:QueryInterface (in: This=0x585f6e8, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585f6e8) returned 0x0
	[0190.224] IUnknown:AddRef (This=0x585f6e8) returned 0x4
	[0190.225] IUnknown:Release (This=0x585f6e8) returned 0x3
	[0190.225] IUnknown:Release (This=0x585f6e8) returned 0x2
	[0190.225] CoTaskMemFree (pv=0x57a2e98) 
	[0190.225] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.225] IUnknown:AddRef (This=0x585f6e8) returned 0x3
	[0190.225] IWbemClassObject:Get (in: This=0x585f6e8, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.225] IWbemClassObject:Get (in: This=0x585f6e8, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.225] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x5c
	[0190.225] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x5c
	[0190.225] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.225] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.225] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.225] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.226] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ce8) returned 0x0
	[0190.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ce8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.226] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ce8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585bb18) returned 0x0
	[0190.226] WbemDefPath:IUnknown:Release (This=0x57a2ce8) returned 0x0
	[0190.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bb18, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585bb18) returned 0x0
	[0190.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bb18, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bb18, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.227] WbemDefPath:IUnknown:AddRef (This=0x585bb18) returned 0x3
	[0190.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bb18, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bb18, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bb18, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5859f20) returned 0x0
	[0190.227] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5859f20, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.227] WbemDefPath:IUnknown:Release (This=0x5859f20) returned 0x3
	[0190.227] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.227] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bb18, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.227] WbemDefPath:IUnknown:Release (This=0x585bb18) returned 0x2
	[0190.227] WbemDefPath:IUnknown:Release (This=0x585bb18) returned 0x1
	[0190.227] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.227] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bb18, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585bb18) returned 0x0
	[0190.227] WbemDefPath:IUnknown:AddRef (This=0x585bb18) returned 0x3
	[0190.227] WbemDefPath:IUnknown:Release (This=0x585bb18) returned 0x2
	[0190.227] WbemDefPath:IWbemPath:SetText (This=0x585bb18, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x0
	[0190.227] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.227] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.227] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.227] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.227] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.227] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.228] IWbemClassObject:Get (in: This=0x585f6e8, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a66b5c*=0, plFlavor=0x2a66b60*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="csrss.exe", varVal2=0x0), pType=0x2a66b5c*=8, plFlavor=0x2a66b60*=0) returned 0x0
	[0190.228] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0190.228] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0190.228] IWbemClassObject:Get (in: This=0x585f6e8, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a66b5c*=8, plFlavor=0x2a66b60*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="csrss.exe", varVal2=0x0), pType=0x2a66b5c*=8, plFlavor=0x2a66b60*=0) returned 0x0
	[0190.228] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0190.228] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0190.228] CoTaskMemAlloc (cb=0x4) returned 0x57a2e98
	[0190.228] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2e98, puReturned=0x2a6632c | out: apObjects=0x57a2e98*=0x585f880, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.230] IUnknown:QueryInterface (in: This=0x585f880, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585f880) returned 0x0
	[0190.230] IUnknown:QueryInterface (in: This=0x585f880, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.230] IUnknown:QueryInterface (in: This=0x585f880, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.230] IUnknown:QueryInterface (in: This=0x585f880, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.231] IUnknown:AddRef (This=0x585f880) returned 0x3
	[0190.231] IUnknown:QueryInterface (in: This=0x585f880, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.231] IUnknown:QueryInterface (in: This=0x585f880, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.231] IUnknown:QueryInterface (in: This=0x585f880, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585f884) returned 0x0
	[0190.231] IMarshal:GetUnmarshalClass (in: This=0x585f884, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.231] IUnknown:Release (This=0x585f884) returned 0x3
	[0190.231] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.231] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.231] IUnknown:QueryInterface (in: This=0x585f880, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.231] IUnknown:Release (This=0x585f880) returned 0x2
	[0190.231] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.231] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.231] IUnknown:QueryInterface (in: This=0x585f880, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585f880) returned 0x0
	[0190.231] IUnknown:AddRef (This=0x585f880) returned 0x4
	[0190.231] IUnknown:Release (This=0x585f880) returned 0x3
	[0190.231] IUnknown:Release (This=0x585f880) returned 0x2
	[0190.231] CoTaskMemFree (pv=0x57a2e98) 
	[0190.231] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.231] IUnknown:AddRef (This=0x585f880) returned 0x3
	[0190.231] IWbemClassObject:Get (in: This=0x585f880, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.232] IWbemClassObject:Get (in: This=0x585f880, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.232] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x5c
	[0190.232] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x5c
	[0190.232] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.232] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.232] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.232] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.233] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2e98) returned 0x0
	[0190.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e98, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.233] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e98, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585be28) returned 0x0
	[0190.233] WbemDefPath:IUnknown:Release (This=0x57a2e98) returned 0x0
	[0190.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x585be28, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585be28) returned 0x0
	[0190.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x585be28, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x585be28, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.233] WbemDefPath:IUnknown:AddRef (This=0x585be28) returned 0x3
	[0190.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x585be28, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x585be28, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x585be28, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x585a070) returned 0x0
	[0190.233] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x585a070, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.233] WbemDefPath:IUnknown:Release (This=0x585a070) returned 0x3
	[0190.233] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.233] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.234] WbemDefPath:IUnknown:QueryInterface (in: This=0x585be28, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.234] WbemDefPath:IUnknown:Release (This=0x585be28) returned 0x2
	[0190.234] WbemDefPath:IUnknown:Release (This=0x585be28) returned 0x1
	[0190.234] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.234] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.234] WbemDefPath:IUnknown:QueryInterface (in: This=0x585be28, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585be28) returned 0x0
	[0190.234] WbemDefPath:IUnknown:AddRef (This=0x585be28) returned 0x3
	[0190.234] WbemDefPath:IUnknown:Release (This=0x585be28) returned 0x2
	[0190.234] WbemDefPath:IWbemPath:SetText (This=0x585be28, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x0
	[0190.234] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.234] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.234] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.234] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.234] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.234] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.234] IWbemClassObject:Get (in: This=0x585f880, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a673b8*=0, plFlavor=0x2a673bc*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winlogon.exe", varVal2=0x0), pType=0x2a673b8*=8, plFlavor=0x2a673bc*=0) returned 0x0
	[0190.234] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0190.234] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0190.234] IWbemClassObject:Get (in: This=0x585f880, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a673b8*=8, plFlavor=0x2a673bc*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winlogon.exe", varVal2=0x0), pType=0x2a673b8*=8, plFlavor=0x2a673bc*=0) returned 0x0
	[0190.234] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0190.234] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0190.234] CoTaskMemAlloc (cb=0x4) returned 0x57a2d58
	[0190.235] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2d58, puReturned=0x2a6632c | out: apObjects=0x57a2d58*=0x5860870, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.237] IUnknown:QueryInterface (in: This=0x5860870, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5860870) returned 0x0
	[0190.237] IUnknown:QueryInterface (in: This=0x5860870, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.237] IUnknown:QueryInterface (in: This=0x5860870, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.237] IUnknown:QueryInterface (in: This=0x5860870, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.237] IUnknown:AddRef (This=0x5860870) returned 0x3
	[0190.237] IUnknown:QueryInterface (in: This=0x5860870, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.237] IUnknown:QueryInterface (in: This=0x5860870, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.237] IUnknown:QueryInterface (in: This=0x5860870, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5860874) returned 0x0
	[0190.237] IMarshal:GetUnmarshalClass (in: This=0x5860874, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.237] IUnknown:Release (This=0x5860874) returned 0x3
	[0190.237] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.237] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.237] IUnknown:QueryInterface (in: This=0x5860870, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.237] IUnknown:Release (This=0x5860870) returned 0x2
	[0190.238] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.238] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.238] IUnknown:QueryInterface (in: This=0x5860870, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5860870) returned 0x0
	[0190.238] IUnknown:AddRef (This=0x5860870) returned 0x4
	[0190.238] IUnknown:Release (This=0x5860870) returned 0x3
	[0190.238] IUnknown:Release (This=0x5860870) returned 0x2
	[0190.238] CoTaskMemFree (pv=0x57a2d58) 
	[0190.238] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.238] IUnknown:AddRef (This=0x5860870) returned 0x3
	[0190.238] IWbemClassObject:Get (in: This=0x5860870, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.238] IWbemClassObject:Get (in: This=0x5860870, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"780\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.238] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"780\"") returned 0x5c
	[0190.238] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"780\"") returned 0x5c
	[0190.238] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.238] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.238] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.238] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.239] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2e98) returned 0x0
	[0190.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e98, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.239] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e98, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b3a8) returned 0x0
	[0190.239] WbemDefPath:IUnknown:Release (This=0x57a2e98) returned 0x0
	[0190.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b3a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b3a8) returned 0x0
	[0190.240] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b3a8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.240] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b3a8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.240] WbemDefPath:IUnknown:AddRef (This=0x585b3a8) returned 0x3
	[0190.240] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b3a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.240] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b3a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.240] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b3a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x585a178) returned 0x0
	[0190.240] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x585a178, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.240] WbemDefPath:IUnknown:Release (This=0x585a178) returned 0x3
	[0190.240] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.240] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.240] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b3a8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.240] WbemDefPath:IUnknown:Release (This=0x585b3a8) returned 0x2
	[0190.240] WbemDefPath:IUnknown:Release (This=0x585b3a8) returned 0x1
	[0190.240] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.240] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.240] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b3a8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b3a8) returned 0x0
	[0190.240] WbemDefPath:IUnknown:AddRef (This=0x585b3a8) returned 0x3
	[0190.240] WbemDefPath:IUnknown:Release (This=0x585b3a8) returned 0x2
	[0190.240] WbemDefPath:IWbemPath:SetText (This=0x585b3a8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"780\"") returned 0x0
	[0190.240] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.240] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.240] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.241] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.241] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.241] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.241] IWbemClassObject:Get (in: This=0x5860870, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a67c24*=0, plFlavor=0x2a67c28*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dwm.exe", varVal2=0x0), pType=0x2a67c24*=8, plFlavor=0x2a67c28*=0) returned 0x0
	[0190.241] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0190.241] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0190.241] IWbemClassObject:Get (in: This=0x5860870, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a67c24*=8, plFlavor=0x2a67c28*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dwm.exe", varVal2=0x0), pType=0x2a67c24*=8, plFlavor=0x2a67c28*=0) returned 0x0
	[0190.241] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0190.241] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0190.241] CoTaskMemAlloc (cb=0x4) returned 0x57a2d38
	[0190.241] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2d38, puReturned=0x2a6632c | out: apObjects=0x57a2d38*=0x58603a8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.242] IUnknown:QueryInterface (in: This=0x58603a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x58603a8) returned 0x0
	[0190.242] IUnknown:QueryInterface (in: This=0x58603a8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.242] IUnknown:QueryInterface (in: This=0x58603a8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.242] IUnknown:QueryInterface (in: This=0x58603a8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.242] IUnknown:AddRef (This=0x58603a8) returned 0x3
	[0190.242] IUnknown:QueryInterface (in: This=0x58603a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.242] IUnknown:QueryInterface (in: This=0x58603a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.242] IUnknown:QueryInterface (in: This=0x58603a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x58603ac) returned 0x0
	[0190.243] IMarshal:GetUnmarshalClass (in: This=0x58603ac, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.243] IUnknown:Release (This=0x58603ac) returned 0x3
	[0190.243] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.243] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.243] IUnknown:QueryInterface (in: This=0x58603a8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.243] IUnknown:Release (This=0x58603a8) returned 0x2
	[0190.243] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.243] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.243] IUnknown:QueryInterface (in: This=0x58603a8, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x58603a8) returned 0x0
	[0190.243] IUnknown:AddRef (This=0x58603a8) returned 0x4
	[0190.243] IUnknown:Release (This=0x58603a8) returned 0x3
	[0190.243] IUnknown:Release (This=0x58603a8) returned 0x2
	[0190.243] CoTaskMemFree (pv=0x57a2d38) 
	[0190.243] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.243] IUnknown:AddRef (This=0x58603a8) returned 0x3
	[0190.243] IWbemClassObject:Get (in: This=0x58603a8, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.243] IWbemClassObject:Get (in: This=0x58603a8, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1316\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.243] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1316\"") returned 0x5e
	[0190.243] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1316\"") returned 0x5e
	[0190.244] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.244] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.244] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.244] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.244] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d38) returned 0x0
	[0190.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.245] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b418) returned 0x0
	[0190.245] WbemDefPath:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0190.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b418, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b418) returned 0x0
	[0190.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b418, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b418, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.245] WbemDefPath:IUnknown:AddRef (This=0x585b418) returned 0x3
	[0190.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b418, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b418, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b418, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x585a4d8) returned 0x0
	[0190.245] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x585a4d8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.245] WbemDefPath:IUnknown:Release (This=0x585a4d8) returned 0x3
	[0190.245] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.245] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b418, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.245] WbemDefPath:IUnknown:Release (This=0x585b418) returned 0x2
	[0190.245] WbemDefPath:IUnknown:Release (This=0x585b418) returned 0x1
	[0190.245] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.245] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b418, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b418) returned 0x0
	[0190.245] WbemDefPath:IUnknown:AddRef (This=0x585b418) returned 0x3
	[0190.245] WbemDefPath:IUnknown:Release (This=0x585b418) returned 0x2
	[0190.246] WbemDefPath:IWbemPath:SetText (This=0x585b418, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1316\"") returned 0x0
	[0190.246] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.246] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.246] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.246] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.246] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.246] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.246] IWbemClassObject:Get (in: This=0x58603a8, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a68478*=0, plFlavor=0x2a6847c*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sihost.exe", varVal2=0x0), pType=0x2a68478*=8, plFlavor=0x2a6847c*=0) returned 0x0
	[0190.246] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0190.247] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0190.247] IWbemClassObject:Get (in: This=0x58603a8, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a68478*=8, plFlavor=0x2a6847c*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sihost.exe", varVal2=0x0), pType=0x2a68478*=8, plFlavor=0x2a6847c*=0) returned 0x0
	[0190.247] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0190.247] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0190.247] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.247] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x585fa18, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.248] IUnknown:QueryInterface (in: This=0x585fa18, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585fa18) returned 0x0
	[0190.248] IUnknown:QueryInterface (in: This=0x585fa18, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.248] IUnknown:QueryInterface (in: This=0x585fa18, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.249] IUnknown:QueryInterface (in: This=0x585fa18, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.249] IUnknown:AddRef (This=0x585fa18) returned 0x3
	[0190.249] IUnknown:QueryInterface (in: This=0x585fa18, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.249] IUnknown:QueryInterface (in: This=0x585fa18, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.249] IUnknown:QueryInterface (in: This=0x585fa18, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585fa1c) returned 0x0
	[0190.249] IMarshal:GetUnmarshalClass (in: This=0x585fa1c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.249] IUnknown:Release (This=0x585fa1c) returned 0x3
	[0190.249] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.249] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.249] IUnknown:QueryInterface (in: This=0x585fa18, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.249] IUnknown:Release (This=0x585fa18) returned 0x2
	[0190.249] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.249] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.249] IUnknown:QueryInterface (in: This=0x585fa18, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585fa18) returned 0x0
	[0190.249] IUnknown:AddRef (This=0x585fa18) returned 0x4
	[0190.249] IUnknown:Release (This=0x585fa18) returned 0x3
	[0190.250] IUnknown:Release (This=0x585fa18) returned 0x2
	[0190.250] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.250] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.250] IUnknown:AddRef (This=0x585fa18) returned 0x3
	[0190.250] IWbemClassObject:Get (in: This=0x585fa18, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.250] IWbemClassObject:Get (in: This=0x585fa18, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1584\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.250] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1584\"") returned 0x5e
	[0190.250] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1584\"") returned 0x5e
	[0190.250] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.250] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.250] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.250] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.251] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.251] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.251] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b108) returned 0x0
	[0190.251] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.251] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b108, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b108) returned 0x0
	[0190.251] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b108, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.252] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b108, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.252] WbemDefPath:IUnknown:AddRef (This=0x585b108) returned 0x3
	[0190.252] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b108, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.252] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b108, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.252] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b108, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x585a538) returned 0x0
	[0190.252] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x585a538, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.252] WbemDefPath:IUnknown:Release (This=0x585a538) returned 0x3
	[0190.252] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.252] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.252] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b108, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.252] WbemDefPath:IUnknown:Release (This=0x585b108) returned 0x2
	[0190.252] WbemDefPath:IUnknown:Release (This=0x585b108) returned 0x1
	[0190.252] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.252] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.252] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b108, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b108) returned 0x0
	[0190.252] WbemDefPath:IUnknown:AddRef (This=0x585b108) returned 0x3
	[0190.252] WbemDefPath:IUnknown:Release (This=0x585b108) returned 0x2
	[0190.252] WbemDefPath:IWbemPath:SetText (This=0x585b108, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1584\"") returned 0x0
	[0190.253] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.253] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.253] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.253] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.253] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.253] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.253] IWbemClassObject:Get (in: This=0x585fa18, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a68cdc*=0, plFlavor=0x2a68ce0*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="RuntimeBroker.exe", varVal2=0x0), pType=0x2a68cdc*=8, plFlavor=0x2a68ce0*=0) returned 0x0
	[0190.253] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0190.253] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0190.253] IWbemClassObject:Get (in: This=0x585fa18, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a68cdc*=8, plFlavor=0x2a68ce0*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="RuntimeBroker.exe", varVal2=0x0), pType=0x2a68cdc*=8, plFlavor=0x2a68ce0*=0) returned 0x0
	[0190.253] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0190.253] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0190.253] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.253] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x585fee0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.312] IUnknown:QueryInterface (in: This=0x585fee0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585fee0) returned 0x0
	[0190.312] IUnknown:QueryInterface (in: This=0x585fee0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.312] IUnknown:QueryInterface (in: This=0x585fee0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.312] IUnknown:QueryInterface (in: This=0x585fee0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.312] IUnknown:AddRef (This=0x585fee0) returned 0x3
	[0190.312] IUnknown:QueryInterface (in: This=0x585fee0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.312] IUnknown:QueryInterface (in: This=0x585fee0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.312] IUnknown:QueryInterface (in: This=0x585fee0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585fee4) returned 0x0
	[0190.312] IMarshal:GetUnmarshalClass (in: This=0x585fee4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.312] IUnknown:Release (This=0x585fee4) returned 0x3
	[0190.312] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.312] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.312] IUnknown:QueryInterface (in: This=0x585fee0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.313] IUnknown:Release (This=0x585fee0) returned 0x2
	[0190.313] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.313] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.313] IUnknown:QueryInterface (in: This=0x585fee0, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585fee0) returned 0x0
	[0190.313] IUnknown:AddRef (This=0x585fee0) returned 0x4
	[0190.313] IUnknown:Release (This=0x585fee0) returned 0x3
	[0190.313] IUnknown:Release (This=0x585fee0) returned 0x2
	[0190.313] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.313] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.313] IUnknown:AddRef (This=0x585fee0) returned 0x3
	[0190.313] IWbemClassObject:Get (in: This=0x585fee0, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.313] IWbemClassObject:Get (in: This=0x585fee0, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.313] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x5e
	[0190.313] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x5e
	[0190.313] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.314] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.314] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.314] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.315] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d58) returned 0x0
	[0190.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.316] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585bbf8) returned 0x0
	[0190.316] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0190.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bbf8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585bbf8) returned 0x0
	[0190.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bbf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bbf8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.316] WbemDefPath:IUnknown:AddRef (This=0x585bbf8) returned 0x3
	[0190.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bbf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bbf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bbf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586c2f0) returned 0x0
	[0190.316] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586c2f0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.316] WbemDefPath:IUnknown:Release (This=0x586c2f0) returned 0x3
	[0190.316] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.316] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bbf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.317] WbemDefPath:IUnknown:Release (This=0x585bbf8) returned 0x2
	[0190.317] WbemDefPath:IUnknown:Release (This=0x585bbf8) returned 0x1
	[0190.317] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.317] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bbf8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585bbf8) returned 0x0
	[0190.317] WbemDefPath:IUnknown:AddRef (This=0x585bbf8) returned 0x3
	[0190.317] WbemDefPath:IUnknown:Release (This=0x585bbf8) returned 0x2
	[0190.317] WbemDefPath:IWbemPath:SetText (This=0x585bbf8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x0
	[0190.317] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.317] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.317] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.317] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.317] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.317] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.317] IWbemClassObject:Get (in: This=0x585fee0, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a69558*=0, plFlavor=0x2a6955c*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="explorer.exe", varVal2=0x0), pType=0x2a69558*=8, plFlavor=0x2a6955c*=0) returned 0x0
	[0190.317] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0190.317] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0190.317] IWbemClassObject:Get (in: This=0x585fee0, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a69558*=8, plFlavor=0x2a6955c*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="explorer.exe", varVal2=0x0), pType=0x2a69558*=8, plFlavor=0x2a6955c*=0) returned 0x0
	[0190.317] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0190.317] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0190.318] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.318] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x585fbb0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.319] IUnknown:QueryInterface (in: This=0x585fbb0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585fbb0) returned 0x0
	[0190.319] IUnknown:QueryInterface (in: This=0x585fbb0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.319] IUnknown:QueryInterface (in: This=0x585fbb0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.320] IUnknown:QueryInterface (in: This=0x585fbb0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.320] IUnknown:AddRef (This=0x585fbb0) returned 0x3
	[0190.320] IUnknown:QueryInterface (in: This=0x585fbb0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.320] IUnknown:QueryInterface (in: This=0x585fbb0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.320] IUnknown:QueryInterface (in: This=0x585fbb0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585fbb4) returned 0x0
	[0190.320] IMarshal:GetUnmarshalClass (in: This=0x585fbb4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.320] IUnknown:Release (This=0x585fbb4) returned 0x3
	[0190.320] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.320] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.320] IUnknown:QueryInterface (in: This=0x585fbb0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.320] IUnknown:Release (This=0x585fbb0) returned 0x2
	[0190.320] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.320] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.320] IUnknown:QueryInterface (in: This=0x585fbb0, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585fbb0) returned 0x0
	[0190.320] IUnknown:AddRef (This=0x585fbb0) returned 0x4
	[0190.320] IUnknown:Release (This=0x585fbb0) returned 0x3
	[0190.320] IUnknown:Release (This=0x585fbb0) returned 0x2
	[0190.321] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.321] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.321] IUnknown:AddRef (This=0x585fbb0) returned 0x3
	[0190.321] IWbemClassObject:Get (in: This=0x585fbb0, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.321] IWbemClassObject:Get (in: This=0x585fbb0, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2312\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.321] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2312\"") returned 0x5e
	[0190.321] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2312\"") returned 0x5e
	[0190.321] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.321] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.321] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.321] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.322] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d38) returned 0x0
	[0190.322] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.322] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b488) returned 0x0
	[0190.322] WbemDefPath:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0190.322] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b488, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b488) returned 0x0
	[0190.322] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b488, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.322] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b488, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.323] WbemDefPath:IUnknown:AddRef (This=0x585b488) returned 0x3
	[0190.323] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b488, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.323] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b488, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.323] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b488, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586c380) returned 0x0
	[0190.323] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586c380, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.323] WbemDefPath:IUnknown:Release (This=0x586c380) returned 0x3
	[0190.323] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.323] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.323] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b488, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.323] WbemDefPath:IUnknown:Release (This=0x585b488) returned 0x2
	[0190.323] WbemDefPath:IUnknown:Release (This=0x585b488) returned 0x1
	[0190.323] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.323] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.323] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b488, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b488) returned 0x0
	[0190.323] WbemDefPath:IUnknown:AddRef (This=0x585b488) returned 0x3
	[0190.323] WbemDefPath:IUnknown:Release (This=0x585b488) returned 0x2
	[0190.323] WbemDefPath:IWbemPath:SetText (This=0x585b488, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2312\"") returned 0x0
	[0190.323] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.323] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.323] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.323] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.323] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.323] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.323] IWbemClassObject:Get (in: This=0x585fbb0, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a69dc4*=0, plFlavor=0x2a69dc8*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="taskhostw.exe", varVal2=0x0), pType=0x2a69dc4*=8, plFlavor=0x2a69dc8*=0) returned 0x0
	[0190.324] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0190.324] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0190.324] IWbemClassObject:Get (in: This=0x585fbb0, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a69dc4*=8, plFlavor=0x2a69dc8*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="taskhostw.exe", varVal2=0x0), pType=0x2a69dc4*=8, plFlavor=0x2a69dc8*=0) returned 0x0
	[0190.324] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0190.324] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0190.324] CoTaskMemAlloc (cb=0x4) returned 0x57a2d38
	[0190.324] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2d38, puReturned=0x2a6632c | out: apObjects=0x57a2d38*=0x585f220, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.325] IUnknown:QueryInterface (in: This=0x585f220, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585f220) returned 0x0
	[0190.325] IUnknown:QueryInterface (in: This=0x585f220, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.325] IUnknown:QueryInterface (in: This=0x585f220, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.325] IUnknown:QueryInterface (in: This=0x585f220, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.325] IUnknown:AddRef (This=0x585f220) returned 0x3
	[0190.325] IUnknown:QueryInterface (in: This=0x585f220, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.325] IUnknown:QueryInterface (in: This=0x585f220, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.325] IUnknown:QueryInterface (in: This=0x585f220, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585f224) returned 0x0
	[0190.325] IMarshal:GetUnmarshalClass (in: This=0x585f224, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.325] IUnknown:Release (This=0x585f224) returned 0x3
	[0190.325] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.325] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.325] IUnknown:QueryInterface (in: This=0x585f220, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.325] IUnknown:Release (This=0x585f220) returned 0x2
	[0190.325] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.326] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.326] IUnknown:QueryInterface (in: This=0x585f220, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585f220) returned 0x0
	[0190.326] IUnknown:AddRef (This=0x585f220) returned 0x4
	[0190.326] IUnknown:Release (This=0x585f220) returned 0x3
	[0190.326] IUnknown:Release (This=0x585f220) returned 0x2
	[0190.326] CoTaskMemFree (pv=0x57a2d38) 
	[0190.326] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.326] IUnknown:AddRef (This=0x585f220) returned 0x3
	[0190.326] IWbemClassObject:Get (in: This=0x585f220, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.326] IWbemClassObject:Get (in: This=0x585f220, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2528\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.326] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2528\"") returned 0x5e
	[0190.326] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2528\"") returned 0x5e
	[0190.326] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.326] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.326] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.326] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.327] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d58) returned 0x0
	[0190.327] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.327] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b568) returned 0x0
	[0190.327] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0190.327] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b568, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b568) returned 0x0
	[0190.327] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b568, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.327] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b568, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.327] WbemDefPath:IUnknown:AddRef (This=0x585b568) returned 0x3
	[0190.327] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b568, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.327] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b568, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b568, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586c6c8) returned 0x0
	[0190.328] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586c6c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.328] WbemDefPath:IUnknown:Release (This=0x586c6c8) returned 0x3
	[0190.328] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.328] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b568, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.328] WbemDefPath:IUnknown:Release (This=0x585b568) returned 0x2
	[0190.328] WbemDefPath:IUnknown:Release (This=0x585b568) returned 0x1
	[0190.328] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.328] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b568, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b568) returned 0x0
	[0190.328] WbemDefPath:IUnknown:AddRef (This=0x585b568) returned 0x3
	[0190.328] WbemDefPath:IUnknown:Release (This=0x585b568) returned 0x2
	[0190.328] WbemDefPath:IWbemPath:SetText (This=0x585b568, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2528\"") returned 0x0
	[0190.328] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.328] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.328] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.328] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.328] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.328] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.328] IWbemClassObject:Get (in: This=0x585f220, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6a630*=0, plFlavor=0x2a6a634*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SkypeHost.exe", varVal2=0x0), pType=0x2a6a630*=8, plFlavor=0x2a6a634*=0) returned 0x0
	[0190.328] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0190.328] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0190.329] IWbemClassObject:Get (in: This=0x585f220, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6a630*=8, plFlavor=0x2a6a634*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SkypeHost.exe", varVal2=0x0), pType=0x2a6a630*=8, plFlavor=0x2a6a634*=0) returned 0x0
	[0190.329] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0190.329] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0190.329] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.329] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5860ba0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.329] IUnknown:QueryInterface (in: This=0x5860ba0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5860ba0) returned 0x0
	[0190.330] IUnknown:QueryInterface (in: This=0x5860ba0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.330] IUnknown:QueryInterface (in: This=0x5860ba0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.330] IUnknown:QueryInterface (in: This=0x5860ba0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.330] IUnknown:AddRef (This=0x5860ba0) returned 0x3
	[0190.330] IUnknown:QueryInterface (in: This=0x5860ba0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.330] IUnknown:QueryInterface (in: This=0x5860ba0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.330] IUnknown:QueryInterface (in: This=0x5860ba0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5860ba4) returned 0x0
	[0190.330] IMarshal:GetUnmarshalClass (in: This=0x5860ba4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.330] IUnknown:Release (This=0x5860ba4) returned 0x3
	[0190.330] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.330] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.330] IUnknown:QueryInterface (in: This=0x5860ba0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.330] IUnknown:Release (This=0x5860ba0) returned 0x2
	[0190.330] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.330] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.330] IUnknown:QueryInterface (in: This=0x5860ba0, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5860ba0) returned 0x0
	[0190.330] IUnknown:AddRef (This=0x5860ba0) returned 0x4
	[0190.331] IUnknown:Release (This=0x5860ba0) returned 0x3
	[0190.331] IUnknown:Release (This=0x5860ba0) returned 0x2
	[0190.331] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.331] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.331] IUnknown:AddRef (This=0x5860ba0) returned 0x3
	[0190.331] IWbemClassObject:Get (in: This=0x5860ba0, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.331] IWbemClassObject:Get (in: This=0x5860ba0, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2660\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.331] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2660\"") returned 0x5e
	[0190.331] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2660\"") returned 0x5e
	[0190.331] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.331] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.331] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.331] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.332] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.332] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.333] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b808) returned 0x0
	[0190.333] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b808, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b808) returned 0x0
	[0190.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b808, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b808, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.333] WbemDefPath:IUnknown:AddRef (This=0x585b808) returned 0x3
	[0190.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b808, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b808, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b808, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586c740) returned 0x0
	[0190.334] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586c740, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.334] WbemDefPath:IUnknown:Release (This=0x586c740) returned 0x3
	[0190.334] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.334] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.334] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b808, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.334] WbemDefPath:IUnknown:Release (This=0x585b808) returned 0x2
	[0190.334] WbemDefPath:IUnknown:Release (This=0x585b808) returned 0x1
	[0190.334] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.334] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.334] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b808, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b808) returned 0x0
	[0190.334] WbemDefPath:IUnknown:AddRef (This=0x585b808) returned 0x3
	[0190.334] WbemDefPath:IUnknown:Release (This=0x585b808) returned 0x2
	[0190.334] WbemDefPath:IWbemPath:SetText (This=0x585b808, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2660\"") returned 0x0
	[0190.334] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.334] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.334] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.334] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.335] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.335] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.335] IWbemClassObject:Get (in: This=0x5860ba0, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6ae9c*=0, plFlavor=0x2a6aea0*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ShellExperienceHost.exe", varVal2=0x0), pType=0x2a6ae9c*=8, plFlavor=0x2a6aea0*=0) returned 0x0
	[0190.335] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0190.335] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0190.335] IWbemClassObject:Get (in: This=0x5860ba0, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6ae9c*=8, plFlavor=0x2a6aea0*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ShellExperienceHost.exe", varVal2=0x0), pType=0x2a6ae9c*=8, plFlavor=0x2a6aea0*=0) returned 0x0
	[0190.335] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0190.335] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0190.335] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.335] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x585fd48, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.343] IUnknown:QueryInterface (in: This=0x585fd48, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585fd48) returned 0x0
	[0190.343] IUnknown:QueryInterface (in: This=0x585fd48, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.343] IUnknown:QueryInterface (in: This=0x585fd48, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.344] IUnknown:QueryInterface (in: This=0x585fd48, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.344] IUnknown:AddRef (This=0x585fd48) returned 0x3
	[0190.344] IUnknown:QueryInterface (in: This=0x585fd48, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.344] IUnknown:QueryInterface (in: This=0x585fd48, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.344] IUnknown:QueryInterface (in: This=0x585fd48, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585fd4c) returned 0x0
	[0190.344] IMarshal:GetUnmarshalClass (in: This=0x585fd4c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.344] IUnknown:Release (This=0x585fd4c) returned 0x3
	[0190.344] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.344] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.344] IUnknown:QueryInterface (in: This=0x585fd48, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.344] IUnknown:Release (This=0x585fd48) returned 0x2
	[0190.344] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.344] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.344] IUnknown:QueryInterface (in: This=0x585fd48, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585fd48) returned 0x0
	[0190.344] IUnknown:AddRef (This=0x585fd48) returned 0x4
	[0190.344] IUnknown:Release (This=0x585fd48) returned 0x3
	[0190.344] IUnknown:Release (This=0x585fd48) returned 0x2
	[0190.344] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.344] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.344] IUnknown:AddRef (This=0x585fd48) returned 0x3
	[0190.345] IWbemClassObject:Get (in: This=0x585fd48, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.345] IWbemClassObject:Get (in: This=0x585fd48, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2768\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.345] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2768\"") returned 0x5e
	[0190.345] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2768\"") returned 0x5e
	[0190.345] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.345] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.345] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.345] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.346] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.346] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.346] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b648) returned 0x0
	[0190.346] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.346] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b648, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b648) returned 0x0
	[0190.346] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b648, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b648, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.347] WbemDefPath:IUnknown:AddRef (This=0x585b648) returned 0x3
	[0190.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b648, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b648, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b648, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586ca10) returned 0x0
	[0190.347] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586ca10, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.347] WbemDefPath:IUnknown:Release (This=0x586ca10) returned 0x3
	[0190.347] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.347] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b648, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.347] WbemDefPath:IUnknown:Release (This=0x585b648) returned 0x2
	[0190.347] WbemDefPath:IUnknown:Release (This=0x585b648) returned 0x1
	[0190.347] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.347] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b648, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b648) returned 0x0
	[0190.347] WbemDefPath:IUnknown:AddRef (This=0x585b648) returned 0x3
	[0190.347] WbemDefPath:IUnknown:Release (This=0x585b648) returned 0x2
	[0190.347] WbemDefPath:IWbemPath:SetText (This=0x585b648, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2768\"") returned 0x0
	[0190.347] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.347] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.347] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.347] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.347] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.376] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.376] IWbemClassObject:Get (in: This=0x585fd48, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6b730*=0, plFlavor=0x2a6b734*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SearchUI.exe", varVal2=0x0), pType=0x2a6b730*=8, plFlavor=0x2a6b734*=0) returned 0x0
	[0190.376] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0190.376] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0190.376] IWbemClassObject:Get (in: This=0x585fd48, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6b730*=8, plFlavor=0x2a6b734*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SearchUI.exe", varVal2=0x0), pType=0x2a6b730*=8, plFlavor=0x2a6b734*=0) returned 0x0
	[0190.376] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0190.376] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0190.376] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.376] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5860a08, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.377] IUnknown:QueryInterface (in: This=0x5860a08, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5860a08) returned 0x0
	[0190.377] IUnknown:QueryInterface (in: This=0x5860a08, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.377] IUnknown:QueryInterface (in: This=0x5860a08, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.377] IUnknown:QueryInterface (in: This=0x5860a08, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.377] IUnknown:AddRef (This=0x5860a08) returned 0x3
	[0190.377] IUnknown:QueryInterface (in: This=0x5860a08, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.377] IUnknown:QueryInterface (in: This=0x5860a08, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.377] IUnknown:QueryInterface (in: This=0x5860a08, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5860a0c) returned 0x0
	[0190.377] IMarshal:GetUnmarshalClass (in: This=0x5860a0c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.377] IUnknown:Release (This=0x5860a0c) returned 0x3
	[0190.377] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.378] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.378] IUnknown:QueryInterface (in: This=0x5860a08, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.378] IUnknown:Release (This=0x5860a08) returned 0x2
	[0190.378] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.378] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.378] IUnknown:QueryInterface (in: This=0x5860a08, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5860a08) returned 0x0
	[0190.378] IUnknown:AddRef (This=0x5860a08) returned 0x4
	[0190.378] IUnknown:Release (This=0x5860a08) returned 0x3
	[0190.378] IUnknown:Release (This=0x5860a08) returned 0x2
	[0190.378] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.378] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.378] IUnknown:AddRef (This=0x5860a08) returned 0x3
	[0190.378] IWbemClassObject:Get (in: This=0x5860a08, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.378] IWbemClassObject:Get (in: This=0x5860a08, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3352\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.378] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3352\"") returned 0x5e
	[0190.378] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3352\"") returned 0x5e
	[0190.378] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.379] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.379] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.379] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.379] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d58) returned 0x0
	[0190.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.380] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b6b8) returned 0x0
	[0190.380] WbemDefPath:IUnknown:Release (This=0x57a2d58) returned 0x0
	[0190.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b6b8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b6b8) returned 0x0
	[0190.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b6b8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b6b8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.380] WbemDefPath:IUnknown:AddRef (This=0x585b6b8) returned 0x3
	[0190.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b6b8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b6b8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b6b8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586cb60) returned 0x0
	[0190.381] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586cb60, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.381] WbemDefPath:IUnknown:Release (This=0x586cb60) returned 0x3
	[0190.381] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.381] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b6b8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.381] WbemDefPath:IUnknown:Release (This=0x585b6b8) returned 0x2
	[0190.381] WbemDefPath:IUnknown:Release (This=0x585b6b8) returned 0x1
	[0190.381] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.381] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b6b8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b6b8) returned 0x0
	[0190.381] WbemDefPath:IUnknown:AddRef (This=0x585b6b8) returned 0x3
	[0190.381] WbemDefPath:IUnknown:Release (This=0x585b6b8) returned 0x2
	[0190.381] WbemDefPath:IWbemPath:SetText (This=0x585b6b8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3352\"") returned 0x0
	[0190.381] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.381] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.381] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.381] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.381] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.381] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.381] IWbemClassObject:Get (in: This=0x5860a08, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6bf9c*=0, plFlavor=0x2a6bfa0*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="svchost.exe", varVal2=0x0), pType=0x2a6bf9c*=8, plFlavor=0x2a6bfa0*=0) returned 0x0
	[0190.382] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0190.382] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0190.382] IWbemClassObject:Get (in: This=0x5860a08, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6bf9c*=8, plFlavor=0x2a6bfa0*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="svchost.exe", varVal2=0x0), pType=0x2a6bf9c*=8, plFlavor=0x2a6bfa0*=0) returned 0x0
	[0190.382] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0190.382] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0190.382] CoTaskMemAlloc (cb=0x4) returned 0x57a2d38
	[0190.382] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2d38, puReturned=0x2a6632c | out: apObjects=0x57a2d38*=0x585eef0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.383] IUnknown:QueryInterface (in: This=0x585eef0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585eef0) returned 0x0
	[0190.383] IUnknown:QueryInterface (in: This=0x585eef0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.383] IUnknown:QueryInterface (in: This=0x585eef0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.383] IUnknown:QueryInterface (in: This=0x585eef0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.383] IUnknown:AddRef (This=0x585eef0) returned 0x3
	[0190.383] IUnknown:QueryInterface (in: This=0x585eef0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.383] IUnknown:QueryInterface (in: This=0x585eef0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.383] IUnknown:QueryInterface (in: This=0x585eef0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585eef4) returned 0x0
	[0190.383] IMarshal:GetUnmarshalClass (in: This=0x585eef4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.383] IUnknown:Release (This=0x585eef4) returned 0x3
	[0190.383] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.384] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.384] IUnknown:QueryInterface (in: This=0x585eef0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.384] IUnknown:Release (This=0x585eef0) returned 0x2
	[0190.384] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.384] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.384] IUnknown:QueryInterface (in: This=0x585eef0, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585eef0) returned 0x0
	[0190.384] IUnknown:AddRef (This=0x585eef0) returned 0x4
	[0190.384] IUnknown:Release (This=0x585eef0) returned 0x3
	[0190.384] IUnknown:Release (This=0x585eef0) returned 0x2
	[0190.384] CoTaskMemFree (pv=0x57a2d38) 
	[0190.384] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.384] IUnknown:AddRef (This=0x585eef0) returned 0x3
	[0190.384] IWbemClassObject:Get (in: This=0x585eef0, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.384] IWbemClassObject:Get (in: This=0x585eef0, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2216\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.384] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2216\"") returned 0x5e
	[0190.384] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2216\"") returned 0x5e
	[0190.385] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.385] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.385] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.385] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.385] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.386] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b728) returned 0x0
	[0190.386] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b728, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b728) returned 0x0
	[0190.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b728, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b728, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.386] WbemDefPath:IUnknown:AddRef (This=0x585b728) returned 0x3
	[0190.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b728, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b728, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b728, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586cb78) returned 0x0
	[0190.386] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586cb78, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.386] WbemDefPath:IUnknown:Release (This=0x586cb78) returned 0x3
	[0190.386] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.387] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.387] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b728, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.387] WbemDefPath:IUnknown:Release (This=0x585b728) returned 0x2
	[0190.387] WbemDefPath:IUnknown:Release (This=0x585b728) returned 0x1
	[0190.387] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.387] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.387] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b728, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b728) returned 0x0
	[0190.387] WbemDefPath:IUnknown:AddRef (This=0x585b728) returned 0x3
	[0190.387] WbemDefPath:IUnknown:Release (This=0x585b728) returned 0x2
	[0190.387] WbemDefPath:IWbemPath:SetText (This=0x585b728, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2216\"") returned 0x0
	[0190.387] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.387] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.387] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.387] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.387] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.387] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.387] IWbemClassObject:Get (in: This=0x585eef0, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6c800*=0, plFlavor=0x2a6c804*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="iexplore.exe", varVal2=0x0), pType=0x2a6c800*=8, plFlavor=0x2a6c804*=0) returned 0x0
	[0190.387] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0190.387] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0190.388] IWbemClassObject:Get (in: This=0x585eef0, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6c800*=8, plFlavor=0x2a6c804*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="iexplore.exe", varVal2=0x0), pType=0x2a6c800*=8, plFlavor=0x2a6c804*=0) returned 0x0
	[0190.388] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0190.388] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0190.388] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.388] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x585ed58, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.389] IUnknown:QueryInterface (in: This=0x585ed58, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585ed58) returned 0x0
	[0190.389] IUnknown:QueryInterface (in: This=0x585ed58, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.389] IUnknown:QueryInterface (in: This=0x585ed58, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.389] IUnknown:QueryInterface (in: This=0x585ed58, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.389] IUnknown:AddRef (This=0x585ed58) returned 0x3
	[0190.389] IUnknown:QueryInterface (in: This=0x585ed58, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.389] IUnknown:QueryInterface (in: This=0x585ed58, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.389] IUnknown:QueryInterface (in: This=0x585ed58, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585ed5c) returned 0x0
	[0190.389] IMarshal:GetUnmarshalClass (in: This=0x585ed5c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.389] IUnknown:Release (This=0x585ed5c) returned 0x3
	[0190.389] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.389] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.389] IUnknown:QueryInterface (in: This=0x585ed58, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.389] IUnknown:Release (This=0x585ed58) returned 0x2
	[0190.389] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.389] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.390] IUnknown:QueryInterface (in: This=0x585ed58, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585ed58) returned 0x0
	[0190.390] IUnknown:AddRef (This=0x585ed58) returned 0x4
	[0190.390] IUnknown:Release (This=0x585ed58) returned 0x3
	[0190.390] IUnknown:Release (This=0x585ed58) returned 0x2
	[0190.390] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.390] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.390] IUnknown:AddRef (This=0x585ed58) returned 0x3
	[0190.390] IWbemClassObject:Get (in: This=0x585ed58, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.390] IWbemClassObject:Get (in: This=0x585ed58, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.390] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"") returned 0x5c
	[0190.390] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"") returned 0x5c
	[0190.390] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.391] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.391] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.391] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.391] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d38) returned 0x0
	[0190.392] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.392] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585b878) returned 0x0
	[0190.392] WbemDefPath:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0190.392] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b878, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585b878) returned 0x0
	[0190.392] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b878, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.392] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b878, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.392] WbemDefPath:IUnknown:AddRef (This=0x585b878) returned 0x3
	[0190.392] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b878, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.392] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b878, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.392] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b878, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586af28) returned 0x0
	[0190.393] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586af28, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.393] WbemDefPath:IUnknown:Release (This=0x586af28) returned 0x3
	[0190.393] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.393] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.393] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b878, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.393] WbemDefPath:IUnknown:Release (This=0x585b878) returned 0x2
	[0190.393] WbemDefPath:IUnknown:Release (This=0x585b878) returned 0x1
	[0190.393] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.393] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.393] WbemDefPath:IUnknown:QueryInterface (in: This=0x585b878, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585b878) returned 0x0
	[0190.393] WbemDefPath:IUnknown:AddRef (This=0x585b878) returned 0x3
	[0190.393] WbemDefPath:IUnknown:Release (This=0x585b878) returned 0x2
	[0190.393] WbemDefPath:IWbemPath:SetText (This=0x585b878, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"") returned 0x0
	[0190.393] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.393] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.393] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.394] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.394] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.394] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.394] IWbemClassObject:Get (in: This=0x585ed58, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6d06c*=0, plFlavor=0x2a6d070*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="prepareimportantspend.exe", varVal2=0x0), pType=0x2a6d06c*=8, plFlavor=0x2a6d070*=0) returned 0x0
	[0190.394] SysStringByteLen (bstr="prepareimportantspend.exe") returned 0x32
	[0190.394] SysStringByteLen (bstr="prepareimportantspend.exe") returned 0x32
	[0190.394] IWbemClassObject:Get (in: This=0x585ed58, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6d06c*=8, plFlavor=0x2a6d070*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="prepareimportantspend.exe", varVal2=0x0), pType=0x2a6d06c*=8, plFlavor=0x2a6d070*=0) returned 0x0
	[0190.394] SysStringByteLen (bstr="prepareimportantspend.exe") returned 0x32
	[0190.394] SysStringByteLen (bstr="prepareimportantspend.exe") returned 0x32
	[0190.394] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.394] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x585f088, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.410] IUnknown:QueryInterface (in: This=0x585f088, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585f088) returned 0x0
	[0190.410] IUnknown:QueryInterface (in: This=0x585f088, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.410] IUnknown:QueryInterface (in: This=0x585f088, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.410] IUnknown:QueryInterface (in: This=0x585f088, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.410] IUnknown:AddRef (This=0x585f088) returned 0x3
	[0190.410] IUnknown:QueryInterface (in: This=0x585f088, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.410] IUnknown:QueryInterface (in: This=0x585f088, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.410] IUnknown:QueryInterface (in: This=0x585f088, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585f08c) returned 0x0
	[0190.411] IMarshal:GetUnmarshalClass (in: This=0x585f08c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.411] IUnknown:Release (This=0x585f08c) returned 0x3
	[0190.411] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.411] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.411] IUnknown:QueryInterface (in: This=0x585f088, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.411] IUnknown:Release (This=0x585f088) returned 0x2
	[0190.411] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.411] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.411] IUnknown:QueryInterface (in: This=0x585f088, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585f088) returned 0x0
	[0190.411] IUnknown:AddRef (This=0x585f088) returned 0x4
	[0190.411] IUnknown:Release (This=0x585f088) returned 0x3
	[0190.411] IUnknown:Release (This=0x585f088) returned 0x2
	[0190.411] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.411] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.411] IUnknown:AddRef (This=0x585f088) returned 0x3
	[0190.411] IWbemClassObject:Get (in: This=0x585f088, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.411] IWbemClassObject:Get (in: This=0x585f088, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2220\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.412] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2220\"") returned 0x5e
	[0190.412] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2220\"") returned 0x5e
	[0190.412] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.412] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.412] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.412] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.413] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d38) returned 0x0
	[0190.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.413] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585bdb8) returned 0x0
	[0190.413] WbemDefPath:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0190.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bdb8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585bdb8) returned 0x0
	[0190.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bdb8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bdb8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.413] WbemDefPath:IUnknown:AddRef (This=0x585bdb8) returned 0x3
	[0190.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bdb8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bdb8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bdb8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586b2a0) returned 0x0
	[0190.413] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586b2a0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.413] WbemDefPath:IUnknown:Release (This=0x586b2a0) returned 0x3
	[0190.413] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.414] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.414] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bdb8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.414] WbemDefPath:IUnknown:Release (This=0x585bdb8) returned 0x2
	[0190.414] WbemDefPath:IUnknown:Release (This=0x585bdb8) returned 0x1
	[0190.414] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.414] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.414] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bdb8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585bdb8) returned 0x0
	[0190.414] WbemDefPath:IUnknown:AddRef (This=0x585bdb8) returned 0x3
	[0190.414] WbemDefPath:IUnknown:Release (This=0x585bdb8) returned 0x2
	[0190.414] WbemDefPath:IWbemPath:SetText (This=0x585bdb8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2220\"") returned 0x0
	[0190.414] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.414] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.414] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.414] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.414] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.414] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.414] IWbemClassObject:Get (in: This=0x585f088, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6d908*=0, plFlavor=0x2a6d90c*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="currentbad.exe", varVal2=0x0), pType=0x2a6d908*=8, plFlavor=0x2a6d90c*=0) returned 0x0
	[0190.414] SysStringByteLen (bstr="currentbad.exe") returned 0x1c
	[0190.414] SysStringByteLen (bstr="currentbad.exe") returned 0x1c
	[0190.414] IWbemClassObject:Get (in: This=0x585f088, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6d908*=8, plFlavor=0x2a6d90c*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="currentbad.exe", varVal2=0x0), pType=0x2a6d908*=8, plFlavor=0x2a6d90c*=0) returned 0x0
	[0190.414] SysStringByteLen (bstr="currentbad.exe") returned 0x1c
	[0190.415] SysStringByteLen (bstr="currentbad.exe") returned 0x1c
	[0190.415] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.415] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x585f3b8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.415] IUnknown:QueryInterface (in: This=0x585f3b8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x585f3b8) returned 0x0
	[0190.415] IUnknown:QueryInterface (in: This=0x585f3b8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.415] IUnknown:QueryInterface (in: This=0x585f3b8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.415] IUnknown:QueryInterface (in: This=0x585f3b8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.416] IUnknown:AddRef (This=0x585f3b8) returned 0x3
	[0190.416] IUnknown:QueryInterface (in: This=0x585f3b8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.416] IUnknown:QueryInterface (in: This=0x585f3b8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.416] IUnknown:QueryInterface (in: This=0x585f3b8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x585f3bc) returned 0x0
	[0190.416] IMarshal:GetUnmarshalClass (in: This=0x585f3bc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.416] IUnknown:Release (This=0x585f3bc) returned 0x3
	[0190.416] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.416] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.416] IUnknown:QueryInterface (in: This=0x585f3b8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.416] IUnknown:Release (This=0x585f3b8) returned 0x2
	[0190.416] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.416] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.416] IUnknown:QueryInterface (in: This=0x585f3b8, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x585f3b8) returned 0x0
	[0190.416] IUnknown:AddRef (This=0x585f3b8) returned 0x4
	[0190.416] IUnknown:Release (This=0x585f3b8) returned 0x3
	[0190.416] IUnknown:Release (This=0x585f3b8) returned 0x2
	[0190.416] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.416] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.416] IUnknown:AddRef (This=0x585f3b8) returned 0x3
	[0190.416] IWbemClassObject:Get (in: This=0x585f3b8, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.416] IWbemClassObject:Get (in: This=0x585f3b8, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3716\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.417] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3716\"") returned 0x5e
	[0190.417] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3716\"") returned 0x5e
	[0190.417] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.417] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.417] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.417] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.418] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.419] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585bcd8) returned 0x0
	[0190.419] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bcd8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585bcd8) returned 0x0
	[0190.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bcd8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bcd8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.419] WbemDefPath:IUnknown:AddRef (This=0x585bcd8) returned 0x3
	[0190.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bcd8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bcd8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bcd8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586b168) returned 0x0
	[0190.419] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586b168, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.419] WbemDefPath:IUnknown:Release (This=0x586b168) returned 0x3
	[0190.419] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.419] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bcd8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.419] WbemDefPath:IUnknown:Release (This=0x585bcd8) returned 0x2
	[0190.419] WbemDefPath:IUnknown:Release (This=0x585bcd8) returned 0x1
	[0190.419] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.419] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bcd8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585bcd8) returned 0x0
	[0190.419] WbemDefPath:IUnknown:AddRef (This=0x585bcd8) returned 0x3
	[0190.419] WbemDefPath:IUnknown:Release (This=0x585bcd8) returned 0x2
	[0190.419] WbemDefPath:IWbemPath:SetText (This=0x585bcd8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3716\"") returned 0x0
	[0190.420] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.420] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.420] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.420] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.420] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.420] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.420] IWbemClassObject:Get (in: This=0x585f3b8, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6e17c*=0, plFlavor=0x2a6e180*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="final.exe", varVal2=0x0), pType=0x2a6e17c*=8, plFlavor=0x2a6e180*=0) returned 0x0
	[0190.420] SysStringByteLen (bstr="final.exe") returned 0x12
	[0190.420] SysStringByteLen (bstr="final.exe") returned 0x12
	[0190.420] IWbemClassObject:Get (in: This=0x585f3b8, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6e17c*=8, plFlavor=0x2a6e180*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="final.exe", varVal2=0x0), pType=0x2a6e17c*=8, plFlavor=0x2a6e180*=0) returned 0x0
	[0190.420] SysStringByteLen (bstr="final.exe") returned 0x12
	[0190.420] SysStringByteLen (bstr="final.exe") returned 0x12
	[0190.420] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.420] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5860210, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.421] IUnknown:QueryInterface (in: This=0x5860210, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5860210) returned 0x0
	[0190.421] IUnknown:QueryInterface (in: This=0x5860210, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.421] IUnknown:QueryInterface (in: This=0x5860210, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.421] IUnknown:QueryInterface (in: This=0x5860210, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.421] IUnknown:AddRef (This=0x5860210) returned 0x3
	[0190.421] IUnknown:QueryInterface (in: This=0x5860210, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.421] IUnknown:QueryInterface (in: This=0x5860210, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.421] IUnknown:QueryInterface (in: This=0x5860210, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5860214) returned 0x0
	[0190.421] IMarshal:GetUnmarshalClass (in: This=0x5860214, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.422] IUnknown:Release (This=0x5860214) returned 0x3
	[0190.422] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.422] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.422] IUnknown:QueryInterface (in: This=0x5860210, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.422] IUnknown:Release (This=0x5860210) returned 0x2
	[0190.422] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.422] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.422] IUnknown:QueryInterface (in: This=0x5860210, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5860210) returned 0x0
	[0190.422] IUnknown:AddRef (This=0x5860210) returned 0x4
	[0190.422] IUnknown:Release (This=0x5860210) returned 0x3
	[0190.422] IUnknown:Release (This=0x5860210) returned 0x2
	[0190.422] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.422] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.422] IUnknown:AddRef (This=0x5860210) returned 0x3
	[0190.422] IWbemClassObject:Get (in: This=0x5860210, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.422] IWbemClassObject:Get (in: This=0x5860210, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3368\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.422] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3368\"") returned 0x5e
	[0190.422] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3368\"") returned 0x5e
	[0190.423] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.423] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.423] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.423] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.423] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d38) returned 0x0
	[0190.424] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.424] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585bc68) returned 0x0
	[0190.424] WbemDefPath:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0190.424] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bc68, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585bc68) returned 0x0
	[0190.424] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bc68, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.424] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bc68, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.424] WbemDefPath:IUnknown:AddRef (This=0x585bc68) returned 0x3
	[0190.424] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bc68, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.424] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bc68, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.424] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bc68, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586b420) returned 0x0
	[0190.424] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586b420, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.424] WbemDefPath:IUnknown:Release (This=0x586b420) returned 0x3
	[0190.424] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.424] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.424] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bc68, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.424] WbemDefPath:IUnknown:Release (This=0x585bc68) returned 0x2
	[0190.425] WbemDefPath:IUnknown:Release (This=0x585bc68) returned 0x1
	[0190.425] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.425] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.425] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bc68, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585bc68) returned 0x0
	[0190.425] WbemDefPath:IUnknown:AddRef (This=0x585bc68) returned 0x3
	[0190.425] WbemDefPath:IUnknown:Release (This=0x585bc68) returned 0x2
	[0190.425] WbemDefPath:IWbemPath:SetText (This=0x585bc68, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3368\"") returned 0x0
	[0190.425] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.425] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.425] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.425] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.425] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.425] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.425] IWbemClassObject:Get (in: This=0x5860210, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6e9d8*=0, plFlavor=0x2a6e9dc*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="kitchen.exe", varVal2=0x0), pType=0x2a6e9d8*=8, plFlavor=0x2a6e9dc*=0) returned 0x0
	[0190.425] SysStringByteLen (bstr="kitchen.exe") returned 0x16
	[0190.425] SysStringByteLen (bstr="kitchen.exe") returned 0x16
	[0190.425] IWbemClassObject:Get (in: This=0x5860210, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6e9d8*=8, plFlavor=0x2a6e9dc*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="kitchen.exe", varVal2=0x0), pType=0x2a6e9d8*=8, plFlavor=0x2a6e9dc*=0) returned 0x0
	[0190.425] SysStringByteLen (bstr="kitchen.exe") returned 0x16
	[0190.426] SysStringByteLen (bstr="kitchen.exe") returned 0x16
	[0190.426] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.426] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x58703b0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.427] IUnknown:QueryInterface (in: This=0x58703b0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x58703b0) returned 0x0
	[0190.427] IUnknown:QueryInterface (in: This=0x58703b0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.427] IUnknown:QueryInterface (in: This=0x58703b0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.427] IUnknown:QueryInterface (in: This=0x58703b0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.427] IUnknown:AddRef (This=0x58703b0) returned 0x3
	[0190.427] IUnknown:QueryInterface (in: This=0x58703b0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.427] IUnknown:QueryInterface (in: This=0x58703b0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.427] IUnknown:QueryInterface (in: This=0x58703b0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x58703b4) returned 0x0
	[0190.428] IMarshal:GetUnmarshalClass (in: This=0x58703b4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.428] IUnknown:Release (This=0x58703b4) returned 0x3
	[0190.428] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.428] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.428] IUnknown:QueryInterface (in: This=0x58703b0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.428] IUnknown:Release (This=0x58703b0) returned 0x2
	[0190.428] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.428] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.428] IUnknown:QueryInterface (in: This=0x58703b0, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x58703b0) returned 0x0
	[0190.428] IUnknown:AddRef (This=0x58703b0) returned 0x4
	[0190.428] IUnknown:Release (This=0x58703b0) returned 0x3
	[0190.428] IUnknown:Release (This=0x58703b0) returned 0x2
	[0190.428] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.428] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.428] IUnknown:AddRef (This=0x58703b0) returned 0x3
	[0190.428] IWbemClassObject:Get (in: This=0x58703b0, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.428] IWbemClassObject:Get (in: This=0x58703b0, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2340\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.428] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2340\"") returned 0x5e
	[0190.428] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2340\"") returned 0x5e
	[0190.428] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.429] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.429] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.429] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.429] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.429] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.429] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585ba38) returned 0x0
	[0190.430] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x585ba38, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585ba38) returned 0x0
	[0190.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x585ba38, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x585ba38, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.430] WbemDefPath:IUnknown:AddRef (This=0x585ba38) returned 0x3
	[0190.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x585ba38, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x585ba38, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x585ba38, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586b4f8) returned 0x0
	[0190.430] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586b4f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.430] WbemDefPath:IUnknown:Release (This=0x586b4f8) returned 0x3
	[0190.430] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.430] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x585ba38, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.430] WbemDefPath:IUnknown:Release (This=0x585ba38) returned 0x2
	[0190.430] WbemDefPath:IUnknown:Release (This=0x585ba38) returned 0x1
	[0190.430] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.430] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x585ba38, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585ba38) returned 0x0
	[0190.431] WbemDefPath:IUnknown:AddRef (This=0x585ba38) returned 0x3
	[0190.431] WbemDefPath:IUnknown:Release (This=0x585ba38) returned 0x2
	[0190.431] WbemDefPath:IWbemPath:SetText (This=0x585ba38, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2340\"") returned 0x0
	[0190.431] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.431] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.431] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.431] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.431] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.431] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.431] IWbemClassObject:Get (in: This=0x58703b0, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6f23c*=0, plFlavor=0x2a6f240*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="goalscientistnear.exe", varVal2=0x0), pType=0x2a6f23c*=8, plFlavor=0x2a6f240*=0) returned 0x0
	[0190.431] SysStringByteLen (bstr="goalscientistnear.exe") returned 0x2a
	[0190.431] SysStringByteLen (bstr="goalscientistnear.exe") returned 0x2a
	[0190.431] IWbemClassObject:Get (in: This=0x58703b0, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6f23c*=8, plFlavor=0x2a6f240*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="goalscientistnear.exe", varVal2=0x0), pType=0x2a6f23c*=8, plFlavor=0x2a6f240*=0) returned 0x0
	[0190.431] SysStringByteLen (bstr="goalscientistnear.exe") returned 0x2a
	[0190.431] SysStringByteLen (bstr="goalscientistnear.exe") returned 0x2a
	[0190.431] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.431] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586fd50, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.439] IUnknown:QueryInterface (in: This=0x586fd50, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586fd50) returned 0x0
	[0190.439] IUnknown:QueryInterface (in: This=0x586fd50, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.444] IUnknown:QueryInterface (in: This=0x586fd50, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.444] IUnknown:QueryInterface (in: This=0x586fd50, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.444] IUnknown:AddRef (This=0x586fd50) returned 0x3
	[0190.444] IUnknown:QueryInterface (in: This=0x586fd50, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.444] IUnknown:QueryInterface (in: This=0x586fd50, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.444] IUnknown:QueryInterface (in: This=0x586fd50, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586fd54) returned 0x0
	[0190.444] IMarshal:GetUnmarshalClass (in: This=0x586fd54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.444] IUnknown:Release (This=0x586fd54) returned 0x3
	[0190.444] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.444] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.444] IUnknown:QueryInterface (in: This=0x586fd50, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.445] IUnknown:Release (This=0x586fd50) returned 0x2
	[0190.445] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.445] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.445] IUnknown:QueryInterface (in: This=0x586fd50, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586fd50) returned 0x0
	[0190.445] IUnknown:AddRef (This=0x586fd50) returned 0x4
	[0190.445] IUnknown:Release (This=0x586fd50) returned 0x3
	[0190.445] IUnknown:Release (This=0x586fd50) returned 0x2
	[0190.445] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.445] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.445] IUnknown:AddRef (This=0x586fd50) returned 0x3
	[0190.445] IWbemClassObject:Get (in: This=0x586fd50, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.445] IWbemClassObject:Get (in: This=0x586fd50, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3396\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.445] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3396\"") returned 0x5e
	[0190.445] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3396\"") returned 0x5e
	[0190.445] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.445] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.446] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.446] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.446] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.446] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.446] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585baa8) returned 0x0
	[0190.447] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x585baa8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585baa8) returned 0x0
	[0190.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x585baa8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x585baa8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.447] WbemDefPath:IUnknown:AddRef (This=0x585baa8) returned 0x3
	[0190.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x585baa8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x585baa8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x585baa8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586b810) returned 0x0
	[0190.447] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586b810, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.447] WbemDefPath:IUnknown:Release (This=0x586b810) returned 0x3
	[0190.447] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.447] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x585baa8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.447] WbemDefPath:IUnknown:Release (This=0x585baa8) returned 0x2
	[0190.447] WbemDefPath:IUnknown:Release (This=0x585baa8) returned 0x1
	[0190.447] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.447] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x585baa8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585baa8) returned 0x0
	[0190.447] WbemDefPath:IUnknown:AddRef (This=0x585baa8) returned 0x3
	[0190.447] WbemDefPath:IUnknown:Release (This=0x585baa8) returned 0x2
	[0190.448] WbemDefPath:IWbemPath:SetText (This=0x585baa8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3396\"") returned 0x0
	[0190.448] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.448] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.448] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.448] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.448] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.448] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.448] IWbemClassObject:Get (in: This=0x586fd50, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6fac8*=0, plFlavor=0x2a6facc*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="perform-late-scientist.exe", varVal2=0x0), pType=0x2a6fac8*=8, plFlavor=0x2a6facc*=0) returned 0x0
	[0190.448] SysStringByteLen (bstr="perform-late-scientist.exe") returned 0x34
	[0190.448] SysStringByteLen (bstr="perform-late-scientist.exe") returned 0x34
	[0190.448] IWbemClassObject:Get (in: This=0x586fd50, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a6fac8*=8, plFlavor=0x2a6facc*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="perform-late-scientist.exe", varVal2=0x0), pType=0x2a6fac8*=8, plFlavor=0x2a6facc*=0) returned 0x0
	[0190.448] SysStringByteLen (bstr="perform-late-scientist.exe") returned 0x34
	[0190.448] SysStringByteLen (bstr="perform-late-scientist.exe") returned 0x34
	[0190.448] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.448] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586f3c0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.450] IUnknown:QueryInterface (in: This=0x586f3c0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586f3c0) returned 0x0
	[0190.450] IUnknown:QueryInterface (in: This=0x586f3c0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.450] IUnknown:QueryInterface (in: This=0x586f3c0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.450] IUnknown:QueryInterface (in: This=0x586f3c0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.450] IUnknown:AddRef (This=0x586f3c0) returned 0x3
	[0190.450] IUnknown:QueryInterface (in: This=0x586f3c0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.450] IUnknown:QueryInterface (in: This=0x586f3c0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.450] IUnknown:QueryInterface (in: This=0x586f3c0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586f3c4) returned 0x0
	[0190.451] IMarshal:GetUnmarshalClass (in: This=0x586f3c4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.451] IUnknown:Release (This=0x586f3c4) returned 0x3
	[0190.451] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.451] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.451] IUnknown:QueryInterface (in: This=0x586f3c0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.451] IUnknown:Release (This=0x586f3c0) returned 0x2
	[0190.451] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.451] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.451] IUnknown:QueryInterface (in: This=0x586f3c0, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586f3c0) returned 0x0
	[0190.451] IUnknown:AddRef (This=0x586f3c0) returned 0x4
	[0190.451] IUnknown:Release (This=0x586f3c0) returned 0x3
	[0190.451] IUnknown:Release (This=0x586f3c0) returned 0x2
	[0190.451] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.451] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.451] IUnknown:AddRef (This=0x586f3c0) returned 0x3
	[0190.451] IWbemClassObject:Get (in: This=0x586f3c0, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.451] IWbemClassObject:Get (in: This=0x586f3c0, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1124\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.451] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1124\"") returned 0x5e
	[0190.451] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1124\"") returned 0x5e
	[0190.451] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.452] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.452] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.452] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.452] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.453] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585bd48) returned 0x0
	[0190.453] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bd48, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585bd48) returned 0x0
	[0190.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bd48, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bd48, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.453] WbemDefPath:IUnknown:AddRef (This=0x585bd48) returned 0x3
	[0190.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bd48, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bd48, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bd48, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586b690) returned 0x0
	[0190.453] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586b690, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.453] WbemDefPath:IUnknown:Release (This=0x586b690) returned 0x3
	[0190.453] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.453] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bd48, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.453] WbemDefPath:IUnknown:Release (This=0x585bd48) returned 0x2
	[0190.453] WbemDefPath:IUnknown:Release (This=0x585bd48) returned 0x1
	[0190.453] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.454] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.454] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bd48, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585bd48) returned 0x0
	[0190.454] WbemDefPath:IUnknown:AddRef (This=0x585bd48) returned 0x3
	[0190.454] WbemDefPath:IUnknown:Release (This=0x585bd48) returned 0x2
	[0190.454] WbemDefPath:IWbemPath:SetText (This=0x585bd48, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1124\"") returned 0x0
	[0190.454] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.454] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.454] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.454] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.454] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.454] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.454] IWbemClassObject:Get (in: This=0x586f3c0, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7036c*=0, plFlavor=0x2a70370*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dream.exe", varVal2=0x0), pType=0x2a7036c*=8, plFlavor=0x2a70370*=0) returned 0x0
	[0190.454] SysStringByteLen (bstr="dream.exe") returned 0x12
	[0190.454] SysStringByteLen (bstr="dream.exe") returned 0x12
	[0190.454] IWbemClassObject:Get (in: This=0x586f3c0, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7036c*=8, plFlavor=0x2a70370*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dream.exe", varVal2=0x0), pType=0x2a7036c*=8, plFlavor=0x2a70370*=0) returned 0x0
	[0190.454] SysStringByteLen (bstr="dream.exe") returned 0x12
	[0190.454] SysStringByteLen (bstr="dream.exe") returned 0x12
	[0190.454] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.455] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586f090, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.456] IUnknown:QueryInterface (in: This=0x586f090, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586f090) returned 0x0
	[0190.457] IUnknown:QueryInterface (in: This=0x586f090, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.457] IUnknown:QueryInterface (in: This=0x586f090, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.457] IUnknown:QueryInterface (in: This=0x586f090, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.457] IUnknown:AddRef (This=0x586f090) returned 0x3
	[0190.457] IUnknown:QueryInterface (in: This=0x586f090, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.457] IUnknown:QueryInterface (in: This=0x586f090, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.457] IUnknown:QueryInterface (in: This=0x586f090, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586f094) returned 0x0
	[0190.457] IMarshal:GetUnmarshalClass (in: This=0x586f094, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.457] IUnknown:Release (This=0x586f094) returned 0x3
	[0190.457] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.457] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.457] IUnknown:QueryInterface (in: This=0x586f090, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.457] IUnknown:Release (This=0x586f090) returned 0x2
	[0190.457] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.457] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.457] IUnknown:QueryInterface (in: This=0x586f090, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586f090) returned 0x0
	[0190.457] IUnknown:AddRef (This=0x586f090) returned 0x4
	[0190.457] IUnknown:Release (This=0x586f090) returned 0x3
	[0190.457] IUnknown:Release (This=0x586f090) returned 0x2
	[0190.457] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.457] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.457] IUnknown:AddRef (This=0x586f090) returned 0x3
	[0190.458] IWbemClassObject:Get (in: This=0x586f090, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.458] IWbemClassObject:Get (in: This=0x586f090, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3388\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.458] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3388\"") returned 0x5e
	[0190.458] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3388\"") returned 0x5e
	[0190.458] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.458] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.458] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.458] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.459] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.459] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.459] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585bf08) returned 0x0
	[0190.459] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.459] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf08, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585bf08) returned 0x0
	[0190.460] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf08, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.460] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf08, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.460] WbemDefPath:IUnknown:AddRef (This=0x585bf08) returned 0x3
	[0190.460] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf08, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.460] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf08, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.460] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf08, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586bbe8) returned 0x0
	[0190.460] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586bbe8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.460] WbemDefPath:IUnknown:Release (This=0x586bbe8) returned 0x3
	[0190.460] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.460] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.460] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf08, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.460] WbemDefPath:IUnknown:Release (This=0x585bf08) returned 0x2
	[0190.460] WbemDefPath:IUnknown:Release (This=0x585bf08) returned 0x1
	[0190.460] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.460] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.460] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf08, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585bf08) returned 0x0
	[0190.460] WbemDefPath:IUnknown:AddRef (This=0x585bf08) returned 0x3
	[0190.461] WbemDefPath:IUnknown:Release (This=0x585bf08) returned 0x2
	[0190.461] WbemDefPath:IWbemPath:SetText (This=0x585bf08, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3388\"") returned 0x0
	[0190.461] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.461] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.461] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.461] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.461] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.461] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.461] IWbemClassObject:Get (in: This=0x586f090, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a70bc8*=0, plFlavor=0x2a70bcc*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="toward after.exe", varVal2=0x0), pType=0x2a70bc8*=8, plFlavor=0x2a70bcc*=0) returned 0x0
	[0190.461] SysStringByteLen (bstr="toward after.exe") returned 0x20
	[0190.461] SysStringByteLen (bstr="toward after.exe") returned 0x20
	[0190.461] IWbemClassObject:Get (in: This=0x586f090, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a70bc8*=8, plFlavor=0x2a70bcc*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="toward after.exe", varVal2=0x0), pType=0x2a70bc8*=8, plFlavor=0x2a70bcc*=0) returned 0x0
	[0190.461] SysStringByteLen (bstr="toward after.exe") returned 0x20
	[0190.461] SysStringByteLen (bstr="toward after.exe") returned 0x20
	[0190.461] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.461] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586fee8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.463] IUnknown:QueryInterface (in: This=0x586fee8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586fee8) returned 0x0
	[0190.464] IUnknown:QueryInterface (in: This=0x586fee8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.464] IUnknown:QueryInterface (in: This=0x586fee8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.464] IUnknown:QueryInterface (in: This=0x586fee8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.464] IUnknown:AddRef (This=0x586fee8) returned 0x3
	[0190.464] IUnknown:QueryInterface (in: This=0x586fee8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.464] IUnknown:QueryInterface (in: This=0x586fee8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.464] IUnknown:QueryInterface (in: This=0x586fee8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586feec) returned 0x0
	[0190.464] IMarshal:GetUnmarshalClass (in: This=0x586feec, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.464] IUnknown:Release (This=0x586feec) returned 0x3
	[0190.464] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.464] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.464] IUnknown:QueryInterface (in: This=0x586fee8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.464] IUnknown:Release (This=0x586fee8) returned 0x2
	[0190.464] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.464] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.464] IUnknown:QueryInterface (in: This=0x586fee8, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586fee8) returned 0x0
	[0190.464] IUnknown:AddRef (This=0x586fee8) returned 0x4
	[0190.464] IUnknown:Release (This=0x586fee8) returned 0x3
	[0190.464] IUnknown:Release (This=0x586fee8) returned 0x2
	[0190.464] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.464] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.464] IUnknown:AddRef (This=0x586fee8) returned 0x3
	[0190.464] IWbemClassObject:Get (in: This=0x586fee8, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.465] IWbemClassObject:Get (in: This=0x586fee8, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3260\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.465] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3260\"") returned 0x5e
	[0190.465] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3260\"") returned 0x5e
	[0190.465] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.465] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.465] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.465] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.466] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.466] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585bf78) returned 0x0
	[0190.466] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf78, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585bf78) returned 0x0
	[0190.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf78, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf78, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.466] WbemDefPath:IUnknown:AddRef (This=0x585bf78) returned 0x3
	[0190.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf78, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.467] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf78, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.467] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf78, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586bd98) returned 0x0
	[0190.467] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586bd98, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.467] WbemDefPath:IUnknown:Release (This=0x586bd98) returned 0x3
	[0190.467] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.467] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.467] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf78, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.467] WbemDefPath:IUnknown:Release (This=0x585bf78) returned 0x2
	[0190.467] WbemDefPath:IUnknown:Release (This=0x585bf78) returned 0x1
	[0190.467] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.467] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.467] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bf78, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585bf78) returned 0x0
	[0190.467] WbemDefPath:IUnknown:AddRef (This=0x585bf78) returned 0x3
	[0190.467] WbemDefPath:IUnknown:Release (This=0x585bf78) returned 0x2
	[0190.467] WbemDefPath:IWbemPath:SetText (This=0x585bf78, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3260\"") returned 0x0
	[0190.467] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.467] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.467] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.467] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.467] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.467] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.467] IWbemClassObject:Get (in: This=0x586fee8, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a71444*=0, plFlavor=0x2a71448*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="owner.exe", varVal2=0x0), pType=0x2a71444*=8, plFlavor=0x2a71448*=0) returned 0x0
	[0190.468] SysStringByteLen (bstr="owner.exe") returned 0x12
	[0190.468] SysStringByteLen (bstr="owner.exe") returned 0x12
	[0190.468] IWbemClassObject:Get (in: This=0x586fee8, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a71444*=8, plFlavor=0x2a71448*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="owner.exe", varVal2=0x0), pType=0x2a71444*=8, plFlavor=0x2a71448*=0) returned 0x0
	[0190.468] SysStringByteLen (bstr="owner.exe") returned 0x12
	[0190.468] SysStringByteLen (bstr="owner.exe") returned 0x12
	[0190.468] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.468] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586f558, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.469] IUnknown:QueryInterface (in: This=0x586f558, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586f558) returned 0x0
	[0190.469] IUnknown:QueryInterface (in: This=0x586f558, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.469] IUnknown:QueryInterface (in: This=0x586f558, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.469] IUnknown:QueryInterface (in: This=0x586f558, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.469] IUnknown:AddRef (This=0x586f558) returned 0x3
	[0190.469] IUnknown:QueryInterface (in: This=0x586f558, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.470] IUnknown:QueryInterface (in: This=0x586f558, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.470] IUnknown:QueryInterface (in: This=0x586f558, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586f55c) returned 0x0
	[0190.470] IMarshal:GetUnmarshalClass (in: This=0x586f55c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.473] IUnknown:Release (This=0x586f55c) returned 0x3
	[0190.473] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.473] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.473] IUnknown:QueryInterface (in: This=0x586f558, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.474] IUnknown:Release (This=0x586f558) returned 0x2
	[0190.474] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.474] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.474] IUnknown:QueryInterface (in: This=0x586f558, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586f558) returned 0x0
	[0190.474] IUnknown:AddRef (This=0x586f558) returned 0x4
	[0190.474] IUnknown:Release (This=0x586f558) returned 0x3
	[0190.474] IUnknown:Release (This=0x586f558) returned 0x2
	[0190.474] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.474] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.474] IUnknown:AddRef (This=0x586f558) returned 0x3
	[0190.474] IWbemClassObject:Get (in: This=0x586f558, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.474] IWbemClassObject:Get (in: This=0x586f558, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4084\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.474] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4084\"") returned 0x5e
	[0190.474] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4084\"") returned 0x5e
	[0190.474] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.475] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.475] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.475] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.475] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.476] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.476] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585bfe8) returned 0x0
	[0190.476] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.476] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bfe8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585bfe8) returned 0x0
	[0190.476] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bfe8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.476] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bfe8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.476] WbemDefPath:IUnknown:AddRef (This=0x585bfe8) returned 0x3
	[0190.476] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bfe8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.476] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bfe8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.476] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bfe8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586bcf0) returned 0x0
	[0190.476] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586bcf0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.476] WbemDefPath:IUnknown:Release (This=0x586bcf0) returned 0x3
	[0190.476] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.477] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bfe8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.477] WbemDefPath:IUnknown:Release (This=0x585bfe8) returned 0x2
	[0190.477] WbemDefPath:IUnknown:Release (This=0x585bfe8) returned 0x1
	[0190.477] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.477] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x585bfe8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585bfe8) returned 0x0
	[0190.477] WbemDefPath:IUnknown:AddRef (This=0x585bfe8) returned 0x3
	[0190.477] WbemDefPath:IUnknown:Release (This=0x585bfe8) returned 0x2
	[0190.477] WbemDefPath:IWbemPath:SetText (This=0x585bfe8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4084\"") returned 0x0
	[0190.477] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.477] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.477] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.477] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.477] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.477] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.477] IWbemClassObject:Get (in: This=0x586f558, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a71ca0*=0, plFlavor=0x2a71ca4*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="oh-her.exe", varVal2=0x0), pType=0x2a71ca0*=8, plFlavor=0x2a71ca4*=0) returned 0x0
	[0190.477] SysStringByteLen (bstr="oh-her.exe") returned 0x14
	[0190.477] SysStringByteLen (bstr="oh-her.exe") returned 0x14
	[0190.477] IWbemClassObject:Get (in: This=0x586f558, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a71ca0*=8, plFlavor=0x2a71ca4*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="oh-her.exe", varVal2=0x0), pType=0x2a71ca0*=8, plFlavor=0x2a71ca4*=0) returned 0x0
	[0190.477] SysStringByteLen (bstr="oh-her.exe") returned 0x14
	[0190.478] SysStringByteLen (bstr="oh-her.exe") returned 0x14
	[0190.478] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.478] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586f6f0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.484] IUnknown:QueryInterface (in: This=0x586f6f0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586f6f0) returned 0x0
	[0190.484] IUnknown:QueryInterface (in: This=0x586f6f0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.484] IUnknown:QueryInterface (in: This=0x586f6f0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.484] IUnknown:QueryInterface (in: This=0x586f6f0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.484] IUnknown:AddRef (This=0x586f6f0) returned 0x3
	[0190.484] IUnknown:QueryInterface (in: This=0x586f6f0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.484] IUnknown:QueryInterface (in: This=0x586f6f0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.484] IUnknown:QueryInterface (in: This=0x586f6f0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586f6f4) returned 0x0
	[0190.485] IMarshal:GetUnmarshalClass (in: This=0x586f6f4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.485] IUnknown:Release (This=0x586f6f4) returned 0x3
	[0190.485] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.485] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.485] IUnknown:QueryInterface (in: This=0x586f6f0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.485] IUnknown:Release (This=0x586f6f0) returned 0x2
	[0190.485] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.485] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.485] IUnknown:QueryInterface (in: This=0x586f6f0, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586f6f0) returned 0x0
	[0190.485] IUnknown:AddRef (This=0x586f6f0) returned 0x4
	[0190.485] IUnknown:Release (This=0x586f6f0) returned 0x3
	[0190.485] IUnknown:Release (This=0x586f6f0) returned 0x2
	[0190.485] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.485] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.485] IUnknown:AddRef (This=0x586f6f0) returned 0x3
	[0190.485] IWbemClassObject:Get (in: This=0x586f6f0, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.485] IWbemClassObject:Get (in: This=0x586f6f0, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3772\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.485] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3772\"") returned 0x5e
	[0190.485] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3772\"") returned 0x5e
	[0190.486] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.486] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.486] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.486] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.486] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.487] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x585c058) returned 0x0
	[0190.487] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x585c058, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x585c058) returned 0x0
	[0190.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x585c058, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x585c058, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.487] WbemDefPath:IUnknown:AddRef (This=0x585c058) returned 0x3
	[0190.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x585c058, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x585c058, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x585c058, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586c050) returned 0x0
	[0190.487] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586c050, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.487] WbemDefPath:IUnknown:Release (This=0x586c050) returned 0x3
	[0190.487] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.488] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.488] WbemDefPath:IUnknown:QueryInterface (in: This=0x585c058, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.488] WbemDefPath:IUnknown:Release (This=0x585c058) returned 0x2
	[0190.488] WbemDefPath:IUnknown:Release (This=0x585c058) returned 0x1
	[0190.488] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.488] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.488] WbemDefPath:IUnknown:QueryInterface (in: This=0x585c058, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x585c058) returned 0x0
	[0190.488] WbemDefPath:IUnknown:AddRef (This=0x585c058) returned 0x3
	[0190.488] WbemDefPath:IUnknown:Release (This=0x585c058) returned 0x2
	[0190.488] WbemDefPath:IWbemPath:SetText (This=0x585c058, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3772\"") returned 0x0
	[0190.488] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.488] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.488] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.488] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.488] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.488] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.488] IWbemClassObject:Get (in: This=0x586f6f0, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a72504*=0, plFlavor=0x2a72508*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="later.exe", varVal2=0x0), pType=0x2a72504*=8, plFlavor=0x2a72508*=0) returned 0x0
	[0190.488] SysStringByteLen (bstr="later.exe") returned 0x12
	[0190.488] SysStringByteLen (bstr="later.exe") returned 0x12
	[0190.488] IWbemClassObject:Get (in: This=0x586f6f0, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a72504*=8, plFlavor=0x2a72508*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="later.exe", varVal2=0x0), pType=0x2a72504*=8, plFlavor=0x2a72508*=0) returned 0x0
	[0190.488] SysStringByteLen (bstr="later.exe") returned 0x12
	[0190.488] SysStringByteLen (bstr="later.exe") returned 0x12
	[0190.489] CoTaskMemAlloc (cb=0x4) returned 0x57a2d38
	[0190.489] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2d38, puReturned=0x2a6632c | out: apObjects=0x57a2d38*=0x586f228, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.489] IUnknown:QueryInterface (in: This=0x586f228, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586f228) returned 0x0
	[0190.489] IUnknown:QueryInterface (in: This=0x586f228, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.489] IUnknown:QueryInterface (in: This=0x586f228, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.489] IUnknown:QueryInterface (in: This=0x586f228, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.490] IUnknown:AddRef (This=0x586f228) returned 0x3
	[0190.490] IUnknown:QueryInterface (in: This=0x586f228, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.490] IUnknown:QueryInterface (in: This=0x586f228, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.490] IUnknown:QueryInterface (in: This=0x586f228, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586f22c) returned 0x0
	[0190.490] IMarshal:GetUnmarshalClass (in: This=0x586f22c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.490] IUnknown:Release (This=0x586f22c) returned 0x3
	[0190.490] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.490] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.490] IUnknown:QueryInterface (in: This=0x586f228, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.490] IUnknown:Release (This=0x586f228) returned 0x2
	[0190.490] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.490] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.490] IUnknown:QueryInterface (in: This=0x586f228, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586f228) returned 0x0
	[0190.490] IUnknown:AddRef (This=0x586f228) returned 0x4
	[0190.490] IUnknown:Release (This=0x586f228) returned 0x3
	[0190.490] IUnknown:Release (This=0x586f228) returned 0x2
	[0190.490] CoTaskMemFree (pv=0x57a2d38) 
	[0190.490] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.490] IUnknown:AddRef (This=0x586f228) returned 0x3
	[0190.490] IWbemClassObject:Get (in: This=0x586f228, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.490] IWbemClassObject:Get (in: This=0x586f228, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.491] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"") returned 0x5e
	[0190.491] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"") returned 0x5e
	[0190.491] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.491] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.491] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.491] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.491] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d38) returned 0x0
	[0190.492] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.492] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876ba8) returned 0x0
	[0190.493] WbemDefPath:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0190.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ba8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876ba8) returned 0x0
	[0190.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ba8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ba8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.493] WbemDefPath:IUnknown:AddRef (This=0x5876ba8) returned 0x3
	[0190.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ba8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ba8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ba8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x586c0e0) returned 0x0
	[0190.493] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x586c0e0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.493] WbemDefPath:IUnknown:Release (This=0x586c0e0) returned 0x3
	[0190.493] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.493] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ba8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.493] WbemDefPath:IUnknown:Release (This=0x5876ba8) returned 0x2
	[0190.493] WbemDefPath:IUnknown:Release (This=0x5876ba8) returned 0x1
	[0190.493] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.493] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ba8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876ba8) returned 0x0
	[0190.493] WbemDefPath:IUnknown:AddRef (This=0x5876ba8) returned 0x3
	[0190.494] WbemDefPath:IUnknown:Release (This=0x5876ba8) returned 0x2
	[0190.494] WbemDefPath:IWbemPath:SetText (This=0x5876ba8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"") returned 0x0
	[0190.494] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.494] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.494] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.494] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.494] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.494] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.495] IWbemClassObject:Get (in: This=0x586f228, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a72d60*=0, plFlavor=0x2a72d64*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="family_enjoy_well.exe", varVal2=0x0), pType=0x2a72d60*=8, plFlavor=0x2a72d64*=0) returned 0x0
	[0190.495] SysStringByteLen (bstr="family_enjoy_well.exe") returned 0x2a
	[0190.495] SysStringByteLen (bstr="family_enjoy_well.exe") returned 0x2a
	[0190.495] IWbemClassObject:Get (in: This=0x586f228, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a72d60*=8, plFlavor=0x2a72d64*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="family_enjoy_well.exe", varVal2=0x0), pType=0x2a72d60*=8, plFlavor=0x2a72d64*=0) returned 0x0
	[0190.495] SysStringByteLen (bstr="family_enjoy_well.exe") returned 0x2a
	[0190.495] SysStringByteLen (bstr="family_enjoy_well.exe") returned 0x2a
	[0190.495] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.495] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5870080, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.496] IUnknown:QueryInterface (in: This=0x5870080, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5870080) returned 0x0
	[0190.496] IUnknown:QueryInterface (in: This=0x5870080, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.496] IUnknown:QueryInterface (in: This=0x5870080, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.496] IUnknown:QueryInterface (in: This=0x5870080, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.496] IUnknown:AddRef (This=0x5870080) returned 0x3
	[0190.496] IUnknown:QueryInterface (in: This=0x5870080, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.496] IUnknown:QueryInterface (in: This=0x5870080, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.496] IUnknown:QueryInterface (in: This=0x5870080, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5870084) returned 0x0
	[0190.496] IMarshal:GetUnmarshalClass (in: This=0x5870084, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.496] IUnknown:Release (This=0x5870084) returned 0x3
	[0190.496] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.496] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.496] IUnknown:QueryInterface (in: This=0x5870080, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.496] IUnknown:Release (This=0x5870080) returned 0x2
	[0190.496] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.496] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.496] IUnknown:QueryInterface (in: This=0x5870080, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5870080) returned 0x0
	[0190.496] IUnknown:AddRef (This=0x5870080) returned 0x4
	[0190.496] IUnknown:Release (This=0x5870080) returned 0x3
	[0190.497] IUnknown:Release (This=0x5870080) returned 0x2
	[0190.497] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.497] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.497] IUnknown:AddRef (This=0x5870080) returned 0x3
	[0190.497] IWbemClassObject:Get (in: This=0x5870080, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.497] IWbemClassObject:Get (in: This=0x5870080, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3780\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.497] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3780\"") returned 0x5e
	[0190.497] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3780\"") returned 0x5e
	[0190.497] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.497] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.497] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.497] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.498] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.499] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876a58) returned 0x0
	[0190.499] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876a58, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876a58) returned 0x0
	[0190.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876a58, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876a58, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.499] WbemDefPath:IUnknown:AddRef (This=0x5876a58) returned 0x3
	[0190.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876a58, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876a58, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876a58, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5877530) returned 0x0
	[0190.499] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5877530, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.499] WbemDefPath:IUnknown:Release (This=0x5877530) returned 0x3
	[0190.499] CoGetContextToken (in: pToken=0x19e300 | out: pToken=0x19e300) returned 0x0
	[0190.499] CoGetContextToken (in: pToken=0x19e708 | out: pToken=0x19e708) returned 0x0
	[0190.499] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876a58, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.499] WbemDefPath:IUnknown:Release (This=0x5876a58) returned 0x2
	[0190.499] WbemDefPath:IUnknown:Release (This=0x5876a58) returned 0x1
	[0190.500] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0190.500] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0190.500] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876a58, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876a58) returned 0x0
	[0190.500] WbemDefPath:IUnknown:AddRef (This=0x5876a58) returned 0x3
	[0190.500] WbemDefPath:IUnknown:Release (This=0x5876a58) returned 0x2
	[0190.500] WbemDefPath:IWbemPath:SetText (This=0x5876a58, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3780\"") returned 0x0
	[0190.500] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.500] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.500] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.500] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.500] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.500] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.500] IWbemClassObject:Get (in: This=0x5870080, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a735ec*=0, plFlavor=0x2a735f0*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="career_left.exe", varVal2=0x0), pType=0x2a735ec*=8, plFlavor=0x2a735f0*=0) returned 0x0
	[0190.500] SysStringByteLen (bstr="career_left.exe") returned 0x1e
	[0190.500] SysStringByteLen (bstr="career_left.exe") returned 0x1e
	[0190.500] IWbemClassObject:Get (in: This=0x5870080, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a735ec*=8, plFlavor=0x2a735f0*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="career_left.exe", varVal2=0x0), pType=0x2a735ec*=8, plFlavor=0x2a735f0*=0) returned 0x0
	[0190.500] SysStringByteLen (bstr="career_left.exe") returned 0x1e
	[0190.500] SysStringByteLen (bstr="career_left.exe") returned 0x1e
	[0190.500] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.500] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586f888, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.501] IUnknown:QueryInterface (in: This=0x586f888, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586f888) returned 0x0
	[0190.501] IUnknown:QueryInterface (in: This=0x586f888, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.501] IUnknown:QueryInterface (in: This=0x586f888, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.502] IUnknown:QueryInterface (in: This=0x586f888, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.502] IUnknown:AddRef (This=0x586f888) returned 0x3
	[0190.502] IUnknown:QueryInterface (in: This=0x586f888, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.502] IUnknown:QueryInterface (in: This=0x586f888, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.502] IUnknown:QueryInterface (in: This=0x586f888, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586f88c) returned 0x0
	[0190.502] IMarshal:GetUnmarshalClass (in: This=0x586f88c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.502] IUnknown:Release (This=0x586f88c) returned 0x3
	[0190.502] CoGetContextToken (in: pToken=0x19e1b0 | out: pToken=0x19e1b0) returned 0x0
	[0190.502] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0
	[0190.502] IUnknown:QueryInterface (in: This=0x586f888, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.502] IUnknown:Release (This=0x586f888) returned 0x2
	[0190.502] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0190.502] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0190.502] IUnknown:QueryInterface (in: This=0x586f888, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586f888) returned 0x0
	[0190.502] IUnknown:AddRef (This=0x586f888) returned 0x4
	[0190.502] IUnknown:Release (This=0x586f888) returned 0x3
	[0190.502] IUnknown:Release (This=0x586f888) returned 0x2
	[0190.502] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.502] CoGetContextToken (in: pToken=0x19eef0 | out: pToken=0x19eef0) returned 0x0
	[0190.502] IUnknown:AddRef (This=0x586f888) returned 0x3
	[0190.502] IWbemClassObject:Get (in: This=0x586f888, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.503] IWbemClassObject:Get (in: This=0x586f888, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.503] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"") returned 0x5e
	[0190.503] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"") returned 0x5e
	[0190.503] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.503] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.503] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.503] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.504] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d38) returned 0x0
	[0190.504] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.504] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x58769e8) returned 0x0
	[0190.504] WbemDefPath:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0190.504] WbemDefPath:IUnknown:QueryInterface (in: This=0x58769e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x58769e8) returned 0x0
	[0190.504] WbemDefPath:IUnknown:QueryInterface (in: This=0x58769e8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.504] WbemDefPath:IUnknown:QueryInterface (in: This=0x58769e8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.504] WbemDefPath:IUnknown:AddRef (This=0x58769e8) returned 0x3
	[0190.504] WbemDefPath:IUnknown:QueryInterface (in: This=0x58769e8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.504] WbemDefPath:IUnknown:QueryInterface (in: This=0x58769e8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.504] WbemDefPath:IUnknown:QueryInterface (in: This=0x58769e8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5877638) returned 0x0
	[0190.504] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5877638, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.504] WbemDefPath:IUnknown:Release (This=0x5877638) returned 0x3
	[0190.505] WbemDefPath:IUnknown:QueryInterface (in: This=0x58769e8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.505] WbemDefPath:IUnknown:Release (This=0x58769e8) returned 0x2
	[0190.505] WbemDefPath:IUnknown:Release (This=0x58769e8) returned 0x1
	[0190.505] WbemDefPath:IUnknown:QueryInterface (in: This=0x58769e8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x58769e8) returned 0x0
	[0190.505] WbemDefPath:IUnknown:AddRef (This=0x58769e8) returned 0x3
	[0190.505] WbemDefPath:IUnknown:Release (This=0x58769e8) returned 0x2
	[0190.505] WbemDefPath:IWbemPath:SetText (This=0x58769e8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"") returned 0x0
	[0190.505] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.505] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.505] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.505] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.505] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.505] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.505] IWbemClassObject:Get (in: This=0x586f888, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a73e60*=0, plFlavor=0x2a73e64*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="rest-reality-fill.exe", varVal2=0x0), pType=0x2a73e60*=8, plFlavor=0x2a73e64*=0) returned 0x0
	[0190.505] SysStringByteLen (bstr="rest-reality-fill.exe") returned 0x2a
	[0190.505] SysStringByteLen (bstr="rest-reality-fill.exe") returned 0x2a
	[0190.505] IWbemClassObject:Get (in: This=0x586f888, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a73e60*=8, plFlavor=0x2a73e64*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="rest-reality-fill.exe", varVal2=0x0), pType=0x2a73e60*=8, plFlavor=0x2a73e64*=0) returned 0x0
	[0190.505] SysStringByteLen (bstr="rest-reality-fill.exe") returned 0x2a
	[0190.505] SysStringByteLen (bstr="rest-reality-fill.exe") returned 0x2a
	[0190.505] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.506] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5870218, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.510] IUnknown:QueryInterface (in: This=0x5870218, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5870218) returned 0x0
	[0190.510] IUnknown:QueryInterface (in: This=0x5870218, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.510] IUnknown:QueryInterface (in: This=0x5870218, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.510] IUnknown:QueryInterface (in: This=0x5870218, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.510] IUnknown:AddRef (This=0x5870218) returned 0x3
	[0190.511] IUnknown:QueryInterface (in: This=0x5870218, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.511] IUnknown:QueryInterface (in: This=0x5870218, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.511] IUnknown:QueryInterface (in: This=0x5870218, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x587021c) returned 0x0
	[0190.511] IMarshal:GetUnmarshalClass (in: This=0x587021c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.511] IUnknown:Release (This=0x587021c) returned 0x3
	[0190.511] IUnknown:QueryInterface (in: This=0x5870218, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.511] IUnknown:Release (This=0x5870218) returned 0x2
	[0190.511] IUnknown:QueryInterface (in: This=0x5870218, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5870218) returned 0x0
	[0190.511] IUnknown:AddRef (This=0x5870218) returned 0x4
	[0190.511] IUnknown:Release (This=0x5870218) returned 0x3
	[0190.511] IUnknown:Release (This=0x5870218) returned 0x2
	[0190.511] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.511] IUnknown:AddRef (This=0x5870218) returned 0x3
	[0190.511] IWbemClassObject:Get (in: This=0x5870218, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.511] IWbemClassObject:Get (in: This=0x5870218, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1468\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.512] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1468\"") returned 0x5e
	[0190.512] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1468\"") returned 0x5e
	[0190.512] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.512] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.512] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.512] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.518] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.518] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.518] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x58763c8) returned 0x0
	[0190.518] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.518] WbemDefPath:IUnknown:QueryInterface (in: This=0x58763c8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x58763c8) returned 0x0
	[0190.518] WbemDefPath:IUnknown:QueryInterface (in: This=0x58763c8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.518] WbemDefPath:IUnknown:QueryInterface (in: This=0x58763c8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.518] WbemDefPath:IUnknown:AddRef (This=0x58763c8) returned 0x3
	[0190.518] WbemDefPath:IUnknown:QueryInterface (in: This=0x58763c8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.518] WbemDefPath:IUnknown:QueryInterface (in: This=0x58763c8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.519] WbemDefPath:IUnknown:QueryInterface (in: This=0x58763c8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x58776e0) returned 0x0
	[0190.519] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58776e0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.519] WbemDefPath:IUnknown:Release (This=0x58776e0) returned 0x3
	[0190.519] WbemDefPath:IUnknown:QueryInterface (in: This=0x58763c8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.519] WbemDefPath:IUnknown:Release (This=0x58763c8) returned 0x2
	[0190.519] WbemDefPath:IUnknown:Release (This=0x58763c8) returned 0x1
	[0190.519] WbemDefPath:IUnknown:QueryInterface (in: This=0x58763c8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x58763c8) returned 0x0
	[0190.519] WbemDefPath:IUnknown:AddRef (This=0x58763c8) returned 0x3
	[0190.519] WbemDefPath:IUnknown:Release (This=0x58763c8) returned 0x2
	[0190.519] WbemDefPath:IWbemPath:SetText (This=0x58763c8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1468\"") returned 0x0
	[0190.519] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.519] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.519] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.519] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.519] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.519] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.519] IWbemClassObject:Get (in: This=0x5870218, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a746ec*=0, plFlavor=0x2a746f0*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="real-condition-american.exe", varVal2=0x0), pType=0x2a746ec*=8, plFlavor=0x2a746f0*=0) returned 0x0
	[0190.519] SysStringByteLen (bstr="real-condition-american.exe") returned 0x36
	[0190.519] SysStringByteLen (bstr="real-condition-american.exe") returned 0x36
	[0190.519] IWbemClassObject:Get (in: This=0x5870218, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a746ec*=8, plFlavor=0x2a746f0*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="real-condition-american.exe", varVal2=0x0), pType=0x2a746ec*=8, plFlavor=0x2a746f0*=0) returned 0x0
	[0190.520] SysStringByteLen (bstr="real-condition-american.exe") returned 0x36
	[0190.520] SysStringByteLen (bstr="real-condition-american.exe") returned 0x36
	[0190.520] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.520] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586fa20, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.520] IUnknown:QueryInterface (in: This=0x586fa20, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586fa20) returned 0x0
	[0190.520] IUnknown:QueryInterface (in: This=0x586fa20, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.520] IUnknown:QueryInterface (in: This=0x586fa20, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.521] IUnknown:QueryInterface (in: This=0x586fa20, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.521] IUnknown:AddRef (This=0x586fa20) returned 0x3
	[0190.521] IUnknown:QueryInterface (in: This=0x586fa20, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.521] IUnknown:QueryInterface (in: This=0x586fa20, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.521] IUnknown:QueryInterface (in: This=0x586fa20, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586fa24) returned 0x0
	[0190.521] IMarshal:GetUnmarshalClass (in: This=0x586fa24, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.521] IUnknown:Release (This=0x586fa24) returned 0x3
	[0190.521] IUnknown:QueryInterface (in: This=0x586fa20, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.521] IUnknown:Release (This=0x586fa20) returned 0x2
	[0190.521] IUnknown:QueryInterface (in: This=0x586fa20, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586fa20) returned 0x0
	[0190.521] IUnknown:AddRef (This=0x586fa20) returned 0x4
	[0190.521] IUnknown:Release (This=0x586fa20) returned 0x3
	[0190.521] IUnknown:Release (This=0x586fa20) returned 0x2
	[0190.521] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.521] IUnknown:AddRef (This=0x586fa20) returned 0x3
	[0190.521] IWbemClassObject:Get (in: This=0x586fa20, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.522] IWbemClassObject:Get (in: This=0x586fa20, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2360\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.522] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2360\"") returned 0x5e
	[0190.522] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2360\"") returned 0x5e
	[0190.522] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.522] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.522] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.522] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.522] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2d38) returned 0x0
	[0190.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2d38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.523] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2d38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876978) returned 0x0
	[0190.523] WbemDefPath:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0190.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876978, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876978) returned 0x0
	[0190.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876978, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876978, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.523] WbemDefPath:IUnknown:AddRef (This=0x5876978) returned 0x3
	[0190.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876978, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876978, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876978, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5877800) returned 0x0
	[0190.523] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5877800, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.523] WbemDefPath:IUnknown:Release (This=0x5877800) returned 0x3
	[0190.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876978, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.524] WbemDefPath:IUnknown:Release (This=0x5876978) returned 0x2
	[0190.524] WbemDefPath:IUnknown:Release (This=0x5876978) returned 0x1
	[0190.524] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876978, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876978) returned 0x0
	[0190.524] WbemDefPath:IUnknown:AddRef (This=0x5876978) returned 0x3
	[0190.524] WbemDefPath:IUnknown:Release (This=0x5876978) returned 0x2
	[0190.524] WbemDefPath:IWbemPath:SetText (This=0x5876978, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2360\"") returned 0x0
	[0190.524] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.524] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.524] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.524] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.524] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.524] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.524] IWbemClassObject:Get (in: This=0x586fa20, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a74f90*=0, plFlavor=0x2a74f94*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="medicalwife.exe", varVal2=0x0), pType=0x2a74f90*=8, plFlavor=0x2a74f94*=0) returned 0x0
	[0190.524] SysStringByteLen (bstr="medicalwife.exe") returned 0x1e
	[0190.524] SysStringByteLen (bstr="medicalwife.exe") returned 0x1e
	[0190.524] IWbemClassObject:Get (in: This=0x586fa20, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a74f90*=8, plFlavor=0x2a74f94*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="medicalwife.exe", varVal2=0x0), pType=0x2a74f90*=8, plFlavor=0x2a74f94*=0) returned 0x0
	[0190.524] SysStringByteLen (bstr="medicalwife.exe") returned 0x1e
	[0190.524] SysStringByteLen (bstr="medicalwife.exe") returned 0x1e
	[0190.524] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.525] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586fbb8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.525] IUnknown:QueryInterface (in: This=0x586fbb8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586fbb8) returned 0x0
	[0190.525] IUnknown:QueryInterface (in: This=0x586fbb8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.525] IUnknown:QueryInterface (in: This=0x586fbb8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.525] IUnknown:QueryInterface (in: This=0x586fbb8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.526] IUnknown:AddRef (This=0x586fbb8) returned 0x3
	[0190.526] IUnknown:QueryInterface (in: This=0x586fbb8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.526] IUnknown:QueryInterface (in: This=0x586fbb8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.526] IUnknown:QueryInterface (in: This=0x586fbb8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586fbbc) returned 0x0
	[0190.526] IMarshal:GetUnmarshalClass (in: This=0x586fbbc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.526] IUnknown:Release (This=0x586fbbc) returned 0x3
	[0190.526] IUnknown:QueryInterface (in: This=0x586fbb8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.526] IUnknown:Release (This=0x586fbb8) returned 0x2
	[0190.526] IUnknown:QueryInterface (in: This=0x586fbb8, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586fbb8) returned 0x0
	[0190.527] IUnknown:AddRef (This=0x586fbb8) returned 0x4
	[0190.527] IUnknown:Release (This=0x586fbb8) returned 0x3
	[0190.527] IUnknown:Release (This=0x586fbb8) returned 0x2
	[0190.527] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.527] IUnknown:AddRef (This=0x586fbb8) returned 0x3
	[0190.527] IWbemClassObject:Get (in: This=0x586fbb8, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.527] IWbemClassObject:Get (in: This=0x586fbb8, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3520\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.527] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3520\"") returned 0x5e
	[0190.527] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3520\"") returned 0x5e
	[0190.527] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.527] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.527] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.527] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.528] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.528] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876ac8) returned 0x0
	[0190.528] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ac8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876ac8) returned 0x0
	[0190.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ac8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ac8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.528] WbemDefPath:IUnknown:AddRef (This=0x5876ac8) returned 0x3
	[0190.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ac8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ac8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ac8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x58779f8) returned 0x0
	[0190.528] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58779f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.528] WbemDefPath:IUnknown:Release (This=0x58779f8) returned 0x3
	[0190.529] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ac8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.529] WbemDefPath:IUnknown:Release (This=0x5876ac8) returned 0x2
	[0190.529] WbemDefPath:IUnknown:Release (This=0x5876ac8) returned 0x1
	[0190.529] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876ac8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876ac8) returned 0x0
	[0190.529] WbemDefPath:IUnknown:AddRef (This=0x5876ac8) returned 0x3
	[0190.529] WbemDefPath:IUnknown:Release (This=0x5876ac8) returned 0x2
	[0190.529] WbemDefPath:IWbemPath:SetText (This=0x5876ac8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3520\"") returned 0x0
	[0190.529] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.529] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.529] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.529] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.529] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.529] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.529] IWbemClassObject:Get (in: This=0x586fbb8, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a75804*=0, plFlavor=0x2a75808*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="happy_service.exe", varVal2=0x0), pType=0x2a75804*=8, plFlavor=0x2a75808*=0) returned 0x0
	[0190.529] SysStringByteLen (bstr="happy_service.exe") returned 0x22
	[0190.529] SysStringByteLen (bstr="happy_service.exe") returned 0x22
	[0190.529] IWbemClassObject:Get (in: This=0x586fbb8, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a75804*=8, plFlavor=0x2a75808*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="happy_service.exe", varVal2=0x0), pType=0x2a75804*=8, plFlavor=0x2a75808*=0) returned 0x0
	[0190.529] SysStringByteLen (bstr="happy_service.exe") returned 0x22
	[0190.529] SysStringByteLen (bstr="happy_service.exe") returned 0x22
	[0190.529] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.529] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x58706e0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.530] IUnknown:QueryInterface (in: This=0x58706e0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x58706e0) returned 0x0
	[0190.530] IUnknown:QueryInterface (in: This=0x58706e0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.530] IUnknown:QueryInterface (in: This=0x58706e0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.530] IUnknown:QueryInterface (in: This=0x58706e0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.530] IUnknown:AddRef (This=0x58706e0) returned 0x3
	[0190.530] IUnknown:QueryInterface (in: This=0x58706e0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.530] IUnknown:QueryInterface (in: This=0x58706e0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.530] IUnknown:QueryInterface (in: This=0x58706e0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x58706e4) returned 0x0
	[0190.530] IMarshal:GetUnmarshalClass (in: This=0x58706e4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.530] IUnknown:Release (This=0x58706e4) returned 0x3
	[0190.531] IUnknown:QueryInterface (in: This=0x58706e0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.531] IUnknown:Release (This=0x58706e0) returned 0x2
	[0190.531] IUnknown:QueryInterface (in: This=0x58706e0, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x58706e0) returned 0x0
	[0190.531] IUnknown:AddRef (This=0x58706e0) returned 0x4
	[0190.531] IUnknown:Release (This=0x58706e0) returned 0x3
	[0190.531] IUnknown:Release (This=0x58706e0) returned 0x2
	[0190.531] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.531] IUnknown:AddRef (This=0x58706e0) returned 0x3
	[0190.531] IWbemClassObject:Get (in: This=0x58706e0, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.531] IWbemClassObject:Get (in: This=0x58706e0, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3808\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.531] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3808\"") returned 0x5e
	[0190.531] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3808\"") returned 0x5e
	[0190.531] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.531] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.532] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.532] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.532] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.532] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876588) returned 0x0
	[0190.532] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876588, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876588) returned 0x0
	[0190.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876588, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876588, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.533] WbemDefPath:IUnknown:AddRef (This=0x5876588) returned 0x3
	[0190.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876588, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876588, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876588, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5877f68) returned 0x0
	[0190.533] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5877f68, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.533] WbemDefPath:IUnknown:Release (This=0x5877f68) returned 0x3
	[0190.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876588, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.533] WbemDefPath:IUnknown:Release (This=0x5876588) returned 0x2
	[0190.533] WbemDefPath:IUnknown:Release (This=0x5876588) returned 0x1
	[0190.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876588, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876588) returned 0x0
	[0190.533] WbemDefPath:IUnknown:AddRef (This=0x5876588) returned 0x3
	[0190.533] WbemDefPath:IUnknown:Release (This=0x5876588) returned 0x2
	[0190.533] WbemDefPath:IWbemPath:SetText (This=0x5876588, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3808\"") returned 0x0
	[0190.533] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.533] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.533] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.534] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.534] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.534] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.534] IWbemClassObject:Get (in: This=0x58706e0, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a76080*=0, plFlavor=0x2a76084*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="many.exe", varVal2=0x0), pType=0x2a76080*=8, plFlavor=0x2a76084*=0) returned 0x0
	[0190.534] SysStringByteLen (bstr="many.exe") returned 0x10
	[0190.534] SysStringByteLen (bstr="many.exe") returned 0x10
	[0190.534] IWbemClassObject:Get (in: This=0x58706e0, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a76080*=8, plFlavor=0x2a76084*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="many.exe", varVal2=0x0), pType=0x2a76080*=8, plFlavor=0x2a76084*=0) returned 0x0
	[0190.534] SysStringByteLen (bstr="many.exe") returned 0x10
	[0190.534] SysStringByteLen (bstr="many.exe") returned 0x10
	[0190.534] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.534] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5870548, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.535] IUnknown:QueryInterface (in: This=0x5870548, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5870548) returned 0x0
	[0190.535] IUnknown:QueryInterface (in: This=0x5870548, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.535] IUnknown:QueryInterface (in: This=0x5870548, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.535] IUnknown:QueryInterface (in: This=0x5870548, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.535] IUnknown:AddRef (This=0x5870548) returned 0x3
	[0190.535] IUnknown:QueryInterface (in: This=0x5870548, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.535] IUnknown:QueryInterface (in: This=0x5870548, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.535] IUnknown:QueryInterface (in: This=0x5870548, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x587054c) returned 0x0
	[0190.535] IMarshal:GetUnmarshalClass (in: This=0x587054c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.535] IUnknown:Release (This=0x587054c) returned 0x3
	[0190.535] IUnknown:QueryInterface (in: This=0x5870548, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.536] IUnknown:Release (This=0x5870548) returned 0x2
	[0190.536] IUnknown:QueryInterface (in: This=0x5870548, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5870548) returned 0x0
	[0190.536] IUnknown:AddRef (This=0x5870548) returned 0x4
	[0190.536] IUnknown:Release (This=0x5870548) returned 0x3
	[0190.536] IUnknown:Release (This=0x5870548) returned 0x2
	[0190.536] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.536] IUnknown:AddRef (This=0x5870548) returned 0x3
	[0190.536] IWbemClassObject:Get (in: This=0x5870548, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.536] IWbemClassObject:Get (in: This=0x5870548, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.536] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"") returned 0x5e
	[0190.536] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"") returned 0x5e
	[0190.536] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.536] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.536] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.536] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.537] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.537] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.537] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876748) returned 0x0
	[0190.537] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.537] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876748, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876748) returned 0x0
	[0190.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876748, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876748, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.538] WbemDefPath:IUnknown:AddRef (This=0x5876748) returned 0x3
	[0190.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876748, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876748, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876748, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5877f98) returned 0x0
	[0190.538] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5877f98, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.538] WbemDefPath:IUnknown:Release (This=0x5877f98) returned 0x3
	[0190.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876748, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.538] WbemDefPath:IUnknown:Release (This=0x5876748) returned 0x2
	[0190.538] WbemDefPath:IUnknown:Release (This=0x5876748) returned 0x1
	[0190.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876748, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876748) returned 0x0
	[0190.538] WbemDefPath:IUnknown:AddRef (This=0x5876748) returned 0x3
	[0190.538] WbemDefPath:IUnknown:Release (This=0x5876748) returned 0x2
	[0190.538] WbemDefPath:IWbemPath:SetText (This=0x5876748, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"") returned 0x0
	[0190.538] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.538] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.538] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.538] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.538] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.538] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.539] IWbemClassObject:Get (in: This=0x5870548, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a768dc*=0, plFlavor=0x2a768e0*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="especially safe foot.exe", varVal2=0x0), pType=0x2a768dc*=8, plFlavor=0x2a768e0*=0) returned 0x0
	[0190.539] SysStringByteLen (bstr="especially safe foot.exe") returned 0x30
	[0190.539] SysStringByteLen (bstr="especially safe foot.exe") returned 0x30
	[0190.539] IWbemClassObject:Get (in: This=0x5870548, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a768dc*=8, plFlavor=0x2a768e0*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="especially safe foot.exe", varVal2=0x0), pType=0x2a768dc*=8, plFlavor=0x2a768e0*=0) returned 0x0
	[0190.539] SysStringByteLen (bstr="especially safe foot.exe") returned 0x30
	[0190.539] SysStringByteLen (bstr="especially safe foot.exe") returned 0x30
	[0190.539] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.539] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586eef8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.540] IUnknown:QueryInterface (in: This=0x586eef8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586eef8) returned 0x0
	[0190.540] IUnknown:QueryInterface (in: This=0x586eef8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.540] IUnknown:QueryInterface (in: This=0x586eef8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.540] IUnknown:QueryInterface (in: This=0x586eef8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.540] IUnknown:AddRef (This=0x586eef8) returned 0x3
	[0190.540] IUnknown:QueryInterface (in: This=0x586eef8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.540] IUnknown:QueryInterface (in: This=0x586eef8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.540] IUnknown:QueryInterface (in: This=0x586eef8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586eefc) returned 0x0
	[0190.540] IMarshal:GetUnmarshalClass (in: This=0x586eefc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.540] IUnknown:Release (This=0x586eefc) returned 0x3
	[0190.540] IUnknown:QueryInterface (in: This=0x586eef8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.540] IUnknown:Release (This=0x586eef8) returned 0x2
	[0190.540] IUnknown:QueryInterface (in: This=0x586eef8, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586eef8) returned 0x0
	[0190.540] IUnknown:AddRef (This=0x586eef8) returned 0x4
	[0190.540] IUnknown:Release (This=0x586eef8) returned 0x3
	[0190.540] IUnknown:Release (This=0x586eef8) returned 0x2
	[0190.540] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.540] IUnknown:AddRef (This=0x586eef8) returned 0x3
	[0190.541] IWbemClassObject:Get (in: This=0x586eef8, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.541] IWbemClassObject:Get (in: This=0x586eef8, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3132\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.541] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3132\"") returned 0x5e
	[0190.541] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3132\"") returned 0x5e
	[0190.541] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.541] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.541] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.541] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.542] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.542] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.542] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876898) returned 0x0
	[0190.542] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.542] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876898, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876898) returned 0x0
	[0190.542] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876898, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.542] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876898, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.542] WbemDefPath:IUnknown:AddRef (This=0x5876898) returned 0x3
	[0190.542] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876898, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.542] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876898, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.542] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876898, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x58781f0) returned 0x0
	[0190.542] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58781f0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.542] WbemDefPath:IUnknown:Release (This=0x58781f0) returned 0x3
	[0190.542] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876898, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.543] WbemDefPath:IUnknown:Release (This=0x5876898) returned 0x2
	[0190.543] WbemDefPath:IUnknown:Release (This=0x5876898) returned 0x1
	[0190.543] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876898, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876898) returned 0x0
	[0190.543] WbemDefPath:IUnknown:AddRef (This=0x5876898) returned 0x3
	[0190.543] WbemDefPath:IUnknown:Release (This=0x5876898) returned 0x2
	[0190.543] WbemDefPath:IWbemPath:SetText (This=0x5876898, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3132\"") returned 0x0
	[0190.543] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.543] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.543] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.543] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.543] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.543] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.543] IWbemClassObject:Get (in: This=0x586eef8, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a77178*=0, plFlavor=0x2a7717c*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="3dftp.exe", varVal2=0x0), pType=0x2a77178*=8, plFlavor=0x2a7717c*=0) returned 0x0
	[0190.543] SysStringByteLen (bstr="3dftp.exe") returned 0x12
	[0190.543] SysStringByteLen (bstr="3dftp.exe") returned 0x12
	[0190.543] IWbemClassObject:Get (in: This=0x586eef8, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a77178*=8, plFlavor=0x2a7717c*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="3dftp.exe", varVal2=0x0), pType=0x2a77178*=8, plFlavor=0x2a7717c*=0) returned 0x0
	[0190.544] SysStringByteLen (bstr="3dftp.exe") returned 0x12
	[0190.544] SysStringByteLen (bstr="3dftp.exe") returned 0x12
	[0190.544] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.544] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5870878, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.544] IUnknown:QueryInterface (in: This=0x5870878, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5870878) returned 0x0
	[0190.544] IUnknown:QueryInterface (in: This=0x5870878, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.544] IUnknown:QueryInterface (in: This=0x5870878, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.544] IUnknown:QueryInterface (in: This=0x5870878, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.544] IUnknown:AddRef (This=0x5870878) returned 0x3
	[0190.545] IUnknown:QueryInterface (in: This=0x5870878, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.545] IUnknown:QueryInterface (in: This=0x5870878, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.545] IUnknown:QueryInterface (in: This=0x5870878, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x587087c) returned 0x0
	[0190.545] IMarshal:GetUnmarshalClass (in: This=0x587087c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.545] IUnknown:Release (This=0x587087c) returned 0x3
	[0190.545] IUnknown:QueryInterface (in: This=0x5870878, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.545] IUnknown:Release (This=0x5870878) returned 0x2
	[0190.545] IUnknown:QueryInterface (in: This=0x5870878, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5870878) returned 0x0
	[0190.545] IUnknown:AddRef (This=0x5870878) returned 0x4
	[0190.545] IUnknown:Release (This=0x5870878) returned 0x3
	[0190.545] IUnknown:Release (This=0x5870878) returned 0x2
	[0190.545] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.545] IUnknown:AddRef (This=0x5870878) returned 0x3
	[0190.545] IWbemClassObject:Get (in: This=0x5870878, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.545] IWbemClassObject:Get (in: This=0x5870878, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3924\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.545] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3924\"") returned 0x5e
	[0190.545] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3924\"") returned 0x5e
	[0190.545] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.545] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.545] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.546] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.551] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.552] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876dd8) returned 0x0
	[0190.552] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876dd8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876dd8) returned 0x0
	[0190.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876dd8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876dd8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.552] WbemDefPath:IUnknown:AddRef (This=0x5876dd8) returned 0x3
	[0190.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876dd8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876dd8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876dd8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x58780e8) returned 0x0
	[0190.552] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58780e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.552] WbemDefPath:IUnknown:Release (This=0x58780e8) returned 0x3
	[0190.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876dd8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.552] WbemDefPath:IUnknown:Release (This=0x5876dd8) returned 0x2
	[0190.552] WbemDefPath:IUnknown:Release (This=0x5876dd8) returned 0x1
	[0190.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876dd8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876dd8) returned 0x0
	[0190.553] WbemDefPath:IUnknown:AddRef (This=0x5876dd8) returned 0x3
	[0190.553] WbemDefPath:IUnknown:Release (This=0x5876dd8) returned 0x2
	[0190.553] WbemDefPath:IWbemPath:SetText (This=0x5876dd8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3924\"") returned 0x0
	[0190.553] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.553] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.553] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.553] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.553] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.553] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.553] IWbemClassObject:Get (in: This=0x5870878, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a779d4*=0, plFlavor=0x2a779d8*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="absolutetelnet.exe", varVal2=0x0), pType=0x2a779d4*=8, plFlavor=0x2a779d8*=0) returned 0x0
	[0190.553] SysStringByteLen (bstr="absolutetelnet.exe") returned 0x24
	[0190.553] SysStringByteLen (bstr="absolutetelnet.exe") returned 0x24
	[0190.553] IWbemClassObject:Get (in: This=0x5870878, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a779d4*=8, plFlavor=0x2a779d8*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="absolutetelnet.exe", varVal2=0x0), pType=0x2a779d4*=8, plFlavor=0x2a779d8*=0) returned 0x0
	[0190.553] SysStringByteLen (bstr="absolutetelnet.exe") returned 0x24
	[0190.553] SysStringByteLen (bstr="absolutetelnet.exe") returned 0x24
	[0190.553] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.553] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5870a10, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.555] IUnknown:QueryInterface (in: This=0x5870a10, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5870a10) returned 0x0
	[0190.555] IUnknown:QueryInterface (in: This=0x5870a10, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.555] IUnknown:QueryInterface (in: This=0x5870a10, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.555] IUnknown:QueryInterface (in: This=0x5870a10, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.555] IUnknown:AddRef (This=0x5870a10) returned 0x3
	[0190.555] IUnknown:QueryInterface (in: This=0x5870a10, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.556] IUnknown:QueryInterface (in: This=0x5870a10, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.556] IUnknown:QueryInterface (in: This=0x5870a10, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5870a14) returned 0x0
	[0190.556] IMarshal:GetUnmarshalClass (in: This=0x5870a14, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.556] IUnknown:Release (This=0x5870a14) returned 0x3
	[0190.556] IUnknown:QueryInterface (in: This=0x5870a10, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.556] IUnknown:Release (This=0x5870a10) returned 0x2
	[0190.556] IUnknown:QueryInterface (in: This=0x5870a10, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5870a10) returned 0x0
	[0190.556] IUnknown:AddRef (This=0x5870a10) returned 0x4
	[0190.556] IUnknown:Release (This=0x5870a10) returned 0x3
	[0190.556] IUnknown:Release (This=0x5870a10) returned 0x2
	[0190.556] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.556] IUnknown:AddRef (This=0x5870a10) returned 0x3
	[0190.556] IWbemClassObject:Get (in: This=0x5870a10, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.556] IWbemClassObject:Get (in: This=0x5870a10, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3504\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.556] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3504\"") returned 0x5e
	[0190.556] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3504\"") returned 0x5e
	[0190.556] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.557] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.557] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.557] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.557] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.557] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.557] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x58765f8) returned 0x0
	[0190.557] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x58765f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x58765f8) returned 0x0
	[0190.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x58765f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x58765f8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.558] WbemDefPath:IUnknown:AddRef (This=0x58765f8) returned 0x3
	[0190.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x58765f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x58765f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x58765f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5878568) returned 0x0
	[0190.558] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5878568, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.558] WbemDefPath:IUnknown:Release (This=0x5878568) returned 0x3
	[0190.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x58765f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.558] WbemDefPath:IUnknown:Release (This=0x58765f8) returned 0x2
	[0190.558] WbemDefPath:IUnknown:Release (This=0x58765f8) returned 0x1
	[0190.558] WbemDefPath:IUnknown:QueryInterface (in: This=0x58765f8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x58765f8) returned 0x0
	[0190.558] WbemDefPath:IUnknown:AddRef (This=0x58765f8) returned 0x3
	[0190.558] WbemDefPath:IUnknown:Release (This=0x58765f8) returned 0x2
	[0190.558] WbemDefPath:IWbemPath:SetText (This=0x58765f8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3504\"") returned 0x0
	[0190.558] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.558] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.558] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.559] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.559] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.559] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.559] IWbemClassObject:Get (in: This=0x5870a10, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a78258*=0, plFlavor=0x2a7825c*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="alftp.exe", varVal2=0x0), pType=0x2a78258*=8, plFlavor=0x2a7825c*=0) returned 0x0
	[0190.559] SysStringByteLen (bstr="alftp.exe") returned 0x12
	[0190.559] SysStringByteLen (bstr="alftp.exe") returned 0x12
	[0190.559] IWbemClassObject:Get (in: This=0x5870a10, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a78258*=8, plFlavor=0x2a7825c*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="alftp.exe", varVal2=0x0), pType=0x2a78258*=8, plFlavor=0x2a7825c*=0) returned 0x0
	[0190.559] SysStringByteLen (bstr="alftp.exe") returned 0x12
	[0190.559] SysStringByteLen (bstr="alftp.exe") returned 0x12
	[0190.559] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.559] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5870ba8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.560] IUnknown:QueryInterface (in: This=0x5870ba8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5870ba8) returned 0x0
	[0190.560] IUnknown:QueryInterface (in: This=0x5870ba8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.560] IUnknown:QueryInterface (in: This=0x5870ba8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.560] IUnknown:QueryInterface (in: This=0x5870ba8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.560] IUnknown:AddRef (This=0x5870ba8) returned 0x3
	[0190.560] IUnknown:QueryInterface (in: This=0x5870ba8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.560] IUnknown:QueryInterface (in: This=0x5870ba8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.560] IUnknown:QueryInterface (in: This=0x5870ba8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5870bac) returned 0x0
	[0190.560] IMarshal:GetUnmarshalClass (in: This=0x5870bac, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.560] IUnknown:Release (This=0x5870bac) returned 0x3
	[0190.560] IUnknown:QueryInterface (in: This=0x5870ba8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.561] IUnknown:Release (This=0x5870ba8) returned 0x2
	[0190.561] IUnknown:QueryInterface (in: This=0x5870ba8, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5870ba8) returned 0x0
	[0190.561] IUnknown:AddRef (This=0x5870ba8) returned 0x4
	[0190.561] IUnknown:Release (This=0x5870ba8) returned 0x3
	[0190.561] IUnknown:Release (This=0x5870ba8) returned 0x2
	[0190.561] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.561] IUnknown:AddRef (This=0x5870ba8) returned 0x3
	[0190.561] IWbemClassObject:Get (in: This=0x5870ba8, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.561] IWbemClassObject:Get (in: This=0x5870ba8, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1524\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.561] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1524\"") returned 0x5e
	[0190.561] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1524\"") returned 0x5e
	[0190.561] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.561] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.561] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.561] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.562] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.562] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876438) returned 0x0
	[0190.562] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876438, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876438) returned 0x0
	[0190.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876438, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876438, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.563] WbemDefPath:IUnknown:AddRef (This=0x5876438) returned 0x3
	[0190.563] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876438, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.563] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876438, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.563] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876438, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x58783a0) returned 0x0
	[0190.563] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58783a0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.563] WbemDefPath:IUnknown:Release (This=0x58783a0) returned 0x3
	[0190.563] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876438, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.563] WbemDefPath:IUnknown:Release (This=0x5876438) returned 0x2
	[0190.563] WbemDefPath:IUnknown:Release (This=0x5876438) returned 0x1
	[0190.563] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876438, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876438) returned 0x0
	[0190.563] WbemDefPath:IUnknown:AddRef (This=0x5876438) returned 0x3
	[0190.563] WbemDefPath:IUnknown:Release (This=0x5876438) returned 0x2
	[0190.563] WbemDefPath:IWbemPath:SetText (This=0x5876438, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1524\"") returned 0x0
	[0190.563] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.563] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.563] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.563] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.563] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.563] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.564] IWbemClassObject:Get (in: This=0x5870ba8, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a78ab4*=0, plFlavor=0x2a78ab8*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="barca.exe", varVal2=0x0), pType=0x2a78ab4*=8, plFlavor=0x2a78ab8*=0) returned 0x0
	[0190.564] SysStringByteLen (bstr="barca.exe") returned 0x12
	[0190.564] SysStringByteLen (bstr="barca.exe") returned 0x12
	[0190.564] IWbemClassObject:Get (in: This=0x5870ba8, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a78ab4*=8, plFlavor=0x2a78ab8*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="barca.exe", varVal2=0x0), pType=0x2a78ab4*=8, plFlavor=0x2a78ab8*=0) returned 0x0
	[0190.564] SysStringByteLen (bstr="barca.exe") returned 0x12
	[0190.564] SysStringByteLen (bstr="barca.exe") returned 0x12
	[0190.564] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.564] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x586ed60, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.565] IUnknown:QueryInterface (in: This=0x586ed60, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x586ed60) returned 0x0
	[0190.565] IUnknown:QueryInterface (in: This=0x586ed60, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.565] IUnknown:QueryInterface (in: This=0x586ed60, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.565] IUnknown:QueryInterface (in: This=0x586ed60, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.565] IUnknown:AddRef (This=0x586ed60) returned 0x3
	[0190.565] IUnknown:QueryInterface (in: This=0x586ed60, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.565] IUnknown:QueryInterface (in: This=0x586ed60, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.565] IUnknown:QueryInterface (in: This=0x586ed60, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x586ed64) returned 0x0
	[0190.565] IMarshal:GetUnmarshalClass (in: This=0x586ed64, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.565] IUnknown:Release (This=0x586ed64) returned 0x3
	[0190.565] IUnknown:QueryInterface (in: This=0x586ed60, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.565] IUnknown:Release (This=0x586ed60) returned 0x2
	[0190.565] IUnknown:QueryInterface (in: This=0x586ed60, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x586ed60) returned 0x0
	[0190.565] IUnknown:AddRef (This=0x586ed60) returned 0x4
	[0190.565] IUnknown:Release (This=0x586ed60) returned 0x3
	[0190.565] IUnknown:Release (This=0x586ed60) returned 0x2
	[0190.566] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.566] IUnknown:AddRef (This=0x586ed60) returned 0x3
	[0190.566] IWbemClassObject:Get (in: This=0x586ed60, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.566] IWbemClassObject:Get (in: This=0x586ed60, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2004\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.566] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2004\"") returned 0x5e
	[0190.566] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2004\"") returned 0x5e
	[0190.566] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.566] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.566] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.566] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.567] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.567] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876b38) returned 0x0
	[0190.567] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876b38, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876b38) returned 0x0
	[0190.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876b38, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876b38, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.567] WbemDefPath:IUnknown:AddRef (This=0x5876b38) returned 0x3
	[0190.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876b38, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876b38, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876b38, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5878760) returned 0x0
	[0190.568] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5878760, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.568] WbemDefPath:IUnknown:Release (This=0x5878760) returned 0x3
	[0190.568] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876b38, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.568] WbemDefPath:IUnknown:Release (This=0x5876b38) returned 0x2
	[0190.568] WbemDefPath:IUnknown:Release (This=0x5876b38) returned 0x1
	[0190.568] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876b38, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876b38) returned 0x0
	[0190.568] WbemDefPath:IUnknown:AddRef (This=0x5876b38) returned 0x3
	[0190.568] WbemDefPath:IUnknown:Release (This=0x5876b38) returned 0x2
	[0190.568] WbemDefPath:IWbemPath:SetText (This=0x5876b38, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2004\"") returned 0x0
	[0190.568] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.568] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.568] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.568] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.568] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.568] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.568] IWbemClassObject:Get (in: This=0x586ed60, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a79310*=0, plFlavor=0x2a79314*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="bitkinex.exe", varVal2=0x0), pType=0x2a79310*=8, plFlavor=0x2a79314*=0) returned 0x0
	[0190.568] SysStringByteLen (bstr="bitkinex.exe") returned 0x18
	[0190.568] SysStringByteLen (bstr="bitkinex.exe") returned 0x18
	[0190.568] IWbemClassObject:Get (in: This=0x586ed60, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a79310*=8, plFlavor=0x2a79314*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="bitkinex.exe", varVal2=0x0), pType=0x2a79310*=8, plFlavor=0x2a79314*=0) returned 0x0
	[0190.568] SysStringByteLen (bstr="bitkinex.exe") returned 0x18
	[0190.568] SysStringByteLen (bstr="bitkinex.exe") returned 0x18
	[0190.569] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.569] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5882580, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.570] IUnknown:QueryInterface (in: This=0x5882580, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5882580) returned 0x0
	[0190.570] IUnknown:QueryInterface (in: This=0x5882580, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.570] IUnknown:QueryInterface (in: This=0x5882580, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.570] IUnknown:QueryInterface (in: This=0x5882580, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.570] IUnknown:AddRef (This=0x5882580) returned 0x3
	[0190.570] IUnknown:QueryInterface (in: This=0x5882580, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.570] IUnknown:QueryInterface (in: This=0x5882580, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.570] IUnknown:QueryInterface (in: This=0x5882580, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5882584) returned 0x0
	[0190.570] IMarshal:GetUnmarshalClass (in: This=0x5882584, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.570] IUnknown:Release (This=0x5882584) returned 0x3
	[0190.570] IUnknown:QueryInterface (in: This=0x5882580, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.570] IUnknown:Release (This=0x5882580) returned 0x2
	[0190.570] IUnknown:QueryInterface (in: This=0x5882580, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5882580) returned 0x0
	[0190.570] IUnknown:AddRef (This=0x5882580) returned 0x4
	[0190.571] IUnknown:Release (This=0x5882580) returned 0x3
	[0190.571] IUnknown:Release (This=0x5882580) returned 0x2
	[0190.571] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.571] IUnknown:AddRef (This=0x5882580) returned 0x3
	[0190.571] IWbemClassObject:Get (in: This=0x5882580, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.571] IWbemClassObject:Get (in: This=0x5882580, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2876\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.571] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2876\"") returned 0x5e
	[0190.571] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2876\"") returned 0x5e
	[0190.571] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.571] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.586] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.586] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.587] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.587] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.587] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876c18) returned 0x0
	[0190.587] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.587] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c18, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876c18) returned 0x0
	[0190.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c18, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c18, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.588] WbemDefPath:IUnknown:AddRef (This=0x5876c18) returned 0x3
	[0190.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c18, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c18, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c18, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x58788b0) returned 0x0
	[0190.588] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58788b0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.588] WbemDefPath:IUnknown:Release (This=0x58788b0) returned 0x3
	[0190.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c18, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.588] WbemDefPath:IUnknown:Release (This=0x5876c18) returned 0x2
	[0190.588] WbemDefPath:IUnknown:Release (This=0x5876c18) returned 0x1
	[0190.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c18, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876c18) returned 0x0
	[0190.588] WbemDefPath:IUnknown:AddRef (This=0x5876c18) returned 0x3
	[0190.588] WbemDefPath:IUnknown:Release (This=0x5876c18) returned 0x2
	[0190.589] WbemDefPath:IWbemPath:SetText (This=0x5876c18, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2876\"") returned 0x0
	[0190.589] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.589] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.589] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.589] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.589] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.589] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.589] IWbemClassObject:Get (in: This=0x5882580, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a79b7c*=0, plFlavor=0x2a79b80*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="coreftp.exe", varVal2=0x0), pType=0x2a79b7c*=8, plFlavor=0x2a79b80*=0) returned 0x0
	[0190.589] SysStringByteLen (bstr="coreftp.exe") returned 0x16
	[0190.589] SysStringByteLen (bstr="coreftp.exe") returned 0x16
	[0190.589] IWbemClassObject:Get (in: This=0x5882580, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a79b7c*=8, plFlavor=0x2a79b80*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="coreftp.exe", varVal2=0x0), pType=0x2a79b7c*=8, plFlavor=0x2a79b80*=0) returned 0x0
	[0190.589] SysStringByteLen (bstr="coreftp.exe") returned 0x16
	[0190.589] SysStringByteLen (bstr="coreftp.exe") returned 0x16
	[0190.589] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.589] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5882be0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.590] IUnknown:QueryInterface (in: This=0x5882be0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5882be0) returned 0x0
	[0190.590] IUnknown:QueryInterface (in: This=0x5882be0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.590] IUnknown:QueryInterface (in: This=0x5882be0, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.590] IUnknown:QueryInterface (in: This=0x5882be0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.590] IUnknown:AddRef (This=0x5882be0) returned 0x3
	[0190.590] IUnknown:QueryInterface (in: This=0x5882be0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.590] IUnknown:QueryInterface (in: This=0x5882be0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.590] IUnknown:QueryInterface (in: This=0x5882be0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5882be4) returned 0x0
	[0190.590] IMarshal:GetUnmarshalClass (in: This=0x5882be4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.590] IUnknown:Release (This=0x5882be4) returned 0x3
	[0190.591] IUnknown:QueryInterface (in: This=0x5882be0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.591] IUnknown:Release (This=0x5882be0) returned 0x2
	[0190.591] IUnknown:QueryInterface (in: This=0x5882be0, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5882be0) returned 0x0
	[0190.591] IUnknown:AddRef (This=0x5882be0) returned 0x4
	[0190.591] IUnknown:Release (This=0x5882be0) returned 0x3
	[0190.591] IUnknown:Release (This=0x5882be0) returned 0x2
	[0190.591] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.591] IUnknown:AddRef (This=0x5882be0) returned 0x3
	[0190.591] IWbemClassObject:Get (in: This=0x5882be0, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.591] IWbemClassObject:Get (in: This=0x5882be0, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1156\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.591] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1156\"") returned 0x5e
	[0190.591] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1156\"") returned 0x5e
	[0190.591] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.591] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.591] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.591] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.592] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.592] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.592] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876668) returned 0x0
	[0190.592] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.592] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876668, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876668) returned 0x0
	[0190.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876668, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876668, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.593] WbemDefPath:IUnknown:AddRef (This=0x5876668) returned 0x3
	[0190.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876668, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876668, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876668, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5878a78) returned 0x0
	[0190.593] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5878a78, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.593] WbemDefPath:IUnknown:Release (This=0x5878a78) returned 0x3
	[0190.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876668, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.593] WbemDefPath:IUnknown:Release (This=0x5876668) returned 0x2
	[0190.593] WbemDefPath:IUnknown:Release (This=0x5876668) returned 0x1
	[0190.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876668, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876668) returned 0x0
	[0190.593] WbemDefPath:IUnknown:AddRef (This=0x5876668) returned 0x3
	[0190.593] WbemDefPath:IUnknown:Release (This=0x5876668) returned 0x2
	[0190.593] WbemDefPath:IWbemPath:SetText (This=0x5876668, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1156\"") returned 0x0
	[0190.594] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.594] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.594] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.594] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.594] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.594] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.594] IWbemClassObject:Get (in: This=0x5882be0, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7a3e0*=0, plFlavor=0x2a7a3e4*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="far.exe", varVal2=0x0), pType=0x2a7a3e0*=8, plFlavor=0x2a7a3e4*=0) returned 0x0
	[0190.594] SysStringByteLen (bstr="far.exe") returned 0xe
	[0190.594] SysStringByteLen (bstr="far.exe") returned 0xe
	[0190.594] IWbemClassObject:Get (in: This=0x5882be0, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7a3e0*=8, plFlavor=0x2a7a3e4*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="far.exe", varVal2=0x0), pType=0x2a7a3e0*=8, plFlavor=0x2a7a3e4*=0) returned 0x0
	[0190.594] SysStringByteLen (bstr="far.exe") returned 0xe
	[0190.594] SysStringByteLen (bstr="far.exe") returned 0xe
	[0190.594] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.594] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5881728, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.596] IUnknown:QueryInterface (in: This=0x5881728, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5881728) returned 0x0
	[0190.596] IUnknown:QueryInterface (in: This=0x5881728, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.596] IUnknown:QueryInterface (in: This=0x5881728, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.596] IUnknown:QueryInterface (in: This=0x5881728, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.596] IUnknown:AddRef (This=0x5881728) returned 0x3
	[0190.596] IUnknown:QueryInterface (in: This=0x5881728, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.596] IUnknown:QueryInterface (in: This=0x5881728, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.596] IUnknown:QueryInterface (in: This=0x5881728, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588172c) returned 0x0
	[0190.596] IMarshal:GetUnmarshalClass (in: This=0x588172c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.596] IUnknown:Release (This=0x588172c) returned 0x3
	[0190.596] IUnknown:QueryInterface (in: This=0x5881728, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.596] IUnknown:Release (This=0x5881728) returned 0x2
	[0190.596] IUnknown:QueryInterface (in: This=0x5881728, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5881728) returned 0x0
	[0190.596] IUnknown:AddRef (This=0x5881728) returned 0x4
	[0190.596] IUnknown:Release (This=0x5881728) returned 0x3
	[0190.596] IUnknown:Release (This=0x5881728) returned 0x2
	[0190.597] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.597] IUnknown:AddRef (This=0x5881728) returned 0x3
	[0190.597] IWbemClassObject:Get (in: This=0x5881728, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.597] IWbemClassObject:Get (in: This=0x5881728, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3856\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.597] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3856\"") returned 0x5e
	[0190.597] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3856\"") returned 0x5e
	[0190.597] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.597] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.597] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.597] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.598] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.598] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876f28) returned 0x0
	[0190.598] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f28, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876f28) returned 0x0
	[0190.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f28, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f28, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.598] WbemDefPath:IUnknown:AddRef (This=0x5876f28) returned 0x3
	[0190.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f28, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f28, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f28, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5878df0) returned 0x0
	[0190.598] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5878df0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.598] WbemDefPath:IUnknown:Release (This=0x5878df0) returned 0x3
	[0190.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f28, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.598] WbemDefPath:IUnknown:Release (This=0x5876f28) returned 0x2
	[0190.598] WbemDefPath:IUnknown:Release (This=0x5876f28) returned 0x1
	[0190.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f28, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876f28) returned 0x0
	[0190.599] WbemDefPath:IUnknown:AddRef (This=0x5876f28) returned 0x3
	[0190.599] WbemDefPath:IUnknown:Release (This=0x5876f28) returned 0x2
	[0190.599] WbemDefPath:IWbemPath:SetText (This=0x5876f28, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3856\"") returned 0x0
	[0190.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.599] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.599] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.599] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.599] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.599] IWbemClassObject:Get (in: This=0x5881728, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7ac34*=0, plFlavor=0x2a7ac38*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="filezilla.exe", varVal2=0x0), pType=0x2a7ac34*=8, plFlavor=0x2a7ac38*=0) returned 0x0
	[0190.599] SysStringByteLen (bstr="filezilla.exe") returned 0x1a
	[0190.599] SysStringByteLen (bstr="filezilla.exe") returned 0x1a
	[0190.599] IWbemClassObject:Get (in: This=0x5881728, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7ac34*=8, plFlavor=0x2a7ac38*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="filezilla.exe", varVal2=0x0), pType=0x2a7ac34*=8, plFlavor=0x2a7ac38*=0) returned 0x0
	[0190.599] SysStringByteLen (bstr="filezilla.exe") returned 0x1a
	[0190.599] SysStringByteLen (bstr="filezilla.exe") returned 0x1a
	[0190.599] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.599] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5882718, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.600] IUnknown:QueryInterface (in: This=0x5882718, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5882718) returned 0x0
	[0190.600] IUnknown:QueryInterface (in: This=0x5882718, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.600] IUnknown:QueryInterface (in: This=0x5882718, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.600] IUnknown:QueryInterface (in: This=0x5882718, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.600] IUnknown:AddRef (This=0x5882718) returned 0x3
	[0190.600] IUnknown:QueryInterface (in: This=0x5882718, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.600] IUnknown:QueryInterface (in: This=0x5882718, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.600] IUnknown:QueryInterface (in: This=0x5882718, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588271c) returned 0x0
	[0190.600] IMarshal:GetUnmarshalClass (in: This=0x588271c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.600] IUnknown:Release (This=0x588271c) returned 0x3
	[0190.600] IUnknown:QueryInterface (in: This=0x5882718, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.601] IUnknown:Release (This=0x5882718) returned 0x2
	[0190.601] IUnknown:QueryInterface (in: This=0x5882718, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5882718) returned 0x0
	[0190.601] IUnknown:AddRef (This=0x5882718) returned 0x4
	[0190.601] IUnknown:Release (This=0x5882718) returned 0x3
	[0190.601] IUnknown:Release (This=0x5882718) returned 0x2
	[0190.601] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.601] IUnknown:AddRef (This=0x5882718) returned 0x3
	[0190.601] IWbemClassObject:Get (in: This=0x5882718, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.601] IWbemClassObject:Get (in: This=0x5882718, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3912\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.601] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3912\"") returned 0x5e
	[0190.601] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3912\"") returned 0x5e
	[0190.601] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.601] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.601] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.601] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.602] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.602] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.602] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5877078) returned 0x0
	[0190.602] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.602] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877078, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5877078) returned 0x0
	[0190.602] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877078, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.602] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877078, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.603] WbemDefPath:IUnknown:AddRef (This=0x5877078) returned 0x3
	[0190.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877078, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877078, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877078, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5878ce8) returned 0x0
	[0190.603] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5878ce8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.603] WbemDefPath:IUnknown:Release (This=0x5878ce8) returned 0x3
	[0190.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877078, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.603] WbemDefPath:IUnknown:Release (This=0x5877078) returned 0x2
	[0190.603] WbemDefPath:IUnknown:Release (This=0x5877078) returned 0x1
	[0190.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877078, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5877078) returned 0x0
	[0190.603] WbemDefPath:IUnknown:AddRef (This=0x5877078) returned 0x3
	[0190.603] WbemDefPath:IUnknown:Release (This=0x5877078) returned 0x2
	[0190.603] WbemDefPath:IWbemPath:SetText (This=0x5877078, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3912\"") returned 0x0
	[0190.603] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.603] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.603] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.603] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.604] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.604] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.604] IWbemClassObject:Get (in: This=0x5882718, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7b4a0*=0, plFlavor=0x2a7b4a4*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="flashfxp.exe", varVal2=0x0), pType=0x2a7b4a0*=8, plFlavor=0x2a7b4a4*=0) returned 0x0
	[0190.604] SysStringByteLen (bstr="flashfxp.exe") returned 0x18
	[0190.604] SysStringByteLen (bstr="flashfxp.exe") returned 0x18
	[0190.604] IWbemClassObject:Get (in: This=0x5882718, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7b4a0*=8, plFlavor=0x2a7b4a4*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="flashfxp.exe", varVal2=0x0), pType=0x2a7b4a0*=8, plFlavor=0x2a7b4a4*=0) returned 0x0
	[0190.604] SysStringByteLen (bstr="flashfxp.exe") returned 0x18
	[0190.604] SysStringByteLen (bstr="flashfxp.exe") returned 0x18
	[0190.604] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.604] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5882d78, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.605] IUnknown:QueryInterface (in: This=0x5882d78, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5882d78) returned 0x0
	[0190.605] IUnknown:QueryInterface (in: This=0x5882d78, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.605] IUnknown:QueryInterface (in: This=0x5882d78, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.605] IUnknown:QueryInterface (in: This=0x5882d78, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e42c | out: ppvObject=0x19e42c*=0x0) returned 0x80004002
	[0190.605] IUnknown:AddRef (This=0x5882d78) returned 0x3
	[0190.605] IUnknown:QueryInterface (in: This=0x5882d78, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.605] IUnknown:QueryInterface (in: This=0x5882d78, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.605] IUnknown:QueryInterface (in: This=0x5882d78, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5882d7c) returned 0x0
	[0190.605] IMarshal:GetUnmarshalClass (in: This=0x5882d7c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.605] IUnknown:Release (This=0x5882d7c) returned 0x3
	[0190.605] IUnknown:QueryInterface (in: This=0x5882d78, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e648 | out: ppvObject=0x19e648*=0x0) returned 0x80004002
	[0190.605] IUnknown:Release (This=0x5882d78) returned 0x2
	[0190.605] IUnknown:QueryInterface (in: This=0x5882d78, riid=0x19ebb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebb4 | out: ppvObject=0x19ebb4*=0x5882d78) returned 0x0
	[0190.605] IUnknown:AddRef (This=0x5882d78) returned 0x4
	[0190.605] IUnknown:Release (This=0x5882d78) returned 0x3
	[0190.605] IUnknown:Release (This=0x5882d78) returned 0x2
	[0190.605] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.606] IUnknown:AddRef (This=0x5882d78) returned 0x3
	[0190.606] IWbemClassObject:Get (in: This=0x5882d78, wszName="__GENUS", lFlags=0, pVal=0x19f204*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f284*=0, plFlavor=0x19f280*=0 | out: pVal=0x19f204*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f284*=3, plFlavor=0x19f280*=64) returned 0x0
	[0190.606] IWbemClassObject:Get (in: This=0x5882d78, wszName="__PATH", lFlags=0, pVal=0x19f1e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f26c*=0, plFlavor=0x19f268*=0 | out: pVal=0x19f1e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3420\"", varVal2=0x0), pType=0x19f26c*=8, plFlavor=0x19f268*=64) returned 0x0
	[0190.606] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3420\"") returned 0x5e
	[0190.606] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3420\"") returned 0x5e
	[0190.606] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.606] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.606] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.606] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.608] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.608] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.608] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876c88) returned 0x0
	[0190.608] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.608] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c88, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876c88) returned 0x0
	[0190.608] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c88, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.608] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c88, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.608] WbemDefPath:IUnknown:AddRef (This=0x5876c88) returned 0x3
	[0190.609] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c88, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.609] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c88, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.609] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c88, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x58790d8) returned 0x0
	[0190.609] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58790d8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.609] WbemDefPath:IUnknown:Release (This=0x58790d8) returned 0x3
	[0190.609] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c88, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.609] WbemDefPath:IUnknown:Release (This=0x5876c88) returned 0x2
	[0190.609] WbemDefPath:IUnknown:Release (This=0x5876c88) returned 0x1
	[0190.609] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876c88, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876c88) returned 0x0
	[0190.609] WbemDefPath:IUnknown:AddRef (This=0x5876c88) returned 0x3
	[0190.609] WbemDefPath:IUnknown:Release (This=0x5876c88) returned 0x2
	[0190.609] WbemDefPath:IWbemPath:SetText (This=0x5876c88, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3420\"") returned 0x0
	[0190.609] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.609] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.609] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.609] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.609] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.609] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.609] IWbemClassObject:Get (in: This=0x5882d78, wszName="Name", lFlags=0, pVal=0x19f208*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7bd0c*=0, plFlavor=0x2a7bd10*=0 | out: pVal=0x19f208*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="fling.exe", varVal2=0x0), pType=0x2a7bd0c*=8, plFlavor=0x2a7bd10*=0) returned 0x0
	[0190.610] SysStringByteLen (bstr="fling.exe") returned 0x12
	[0190.610] SysStringByteLen (bstr="fling.exe") returned 0x12
	[0190.610] IWbemClassObject:Get (in: This=0x5882d78, wszName="Name", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a7bd0c*=8, plFlavor=0x2a7bd10*=0 | out: pVal=0x19f210*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="fling.exe", varVal2=0x0), pType=0x2a7bd0c*=8, plFlavor=0x2a7bd10*=0) returned 0x0
	[0190.610] SysStringByteLen (bstr="fling.exe") returned 0x12
	[0190.610] SysStringByteLen (bstr="fling.exe") returned 0x12
	[0190.610] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.610] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5881590, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.610] IUnknown:QueryInterface (in: This=0x5881590, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e878 | out: ppvObject=0x19e878*=0x5881590) returned 0x0
	[0190.610] IUnknown:QueryInterface (in: This=0x5881590, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e834 | out: ppvObject=0x19e834*=0x0) returned 0x80004002
	[0190.610] IUnknown:QueryInterface (in: This=0x5881590, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002
	[0190.611] IUnknown:AddRef (This=0x5881590) returned 0x3
	[0190.611] IUnknown:QueryInterface (in: This=0x5881590, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.611] IUnknown:QueryInterface (in: This=0x5881590, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.611] IUnknown:QueryInterface (in: This=0x5881590, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5881594) returned 0x0
	[0190.611] IMarshal:GetUnmarshalClass (in: This=0x5881594, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.611] IUnknown:Release (This=0x5881594) returned 0x3
	[0190.611] IUnknown:Release (This=0x5881590) returned 0x2
	[0190.611] IUnknown:AddRef (This=0x5881590) returned 0x4
	[0190.611] IUnknown:Release (This=0x5881590) returned 0x3
	[0190.611] IUnknown:Release (This=0x5881590) returned 0x2
	[0190.611] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.611] IUnknown:AddRef (This=0x5881590) returned 0x3
	[0190.612] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2900\"") returned 0x5e
	[0190.612] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2900\"") returned 0x5e
	[0190.612] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.612] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.612] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.612] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.615] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.615] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x58764a8) returned 0x0
	[0190.615] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.615] WbemDefPath:IUnknown:QueryInterface (in: This=0x58764a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x58764a8) returned 0x0
	[0190.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x58764a8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x58764a8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.616] WbemDefPath:IUnknown:AddRef (This=0x58764a8) returned 0x3
	[0190.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x58764a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x58764a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x58764a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5878eb0) returned 0x0
	[0190.616] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5878eb0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.616] WbemDefPath:IUnknown:Release (This=0x5878eb0) returned 0x3
	[0190.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x58764a8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.616] WbemDefPath:IUnknown:Release (This=0x58764a8) returned 0x2
	[0190.616] WbemDefPath:IUnknown:Release (This=0x58764a8) returned 0x1
	[0190.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x58764a8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x58764a8) returned 0x0
	[0190.616] WbemDefPath:IUnknown:AddRef (This=0x58764a8) returned 0x3
	[0190.616] WbemDefPath:IUnknown:Release (This=0x58764a8) returned 0x2
	[0190.616] WbemDefPath:IWbemPath:SetText (This=0x58764a8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2900\"") returned 0x0
	[0190.616] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.616] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.617] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.617] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.617] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.617] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.617] SysStringByteLen (bstr="foxmailincmail.exe") returned 0x24
	[0190.617] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.617] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x58828b0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.618] IUnknown:AddRef (This=0x58828b0) returned 0x3
	[0190.618] IUnknown:QueryInterface (in: This=0x58828b0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.618] IUnknown:QueryInterface (in: This=0x58828b0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.618] IUnknown:QueryInterface (in: This=0x58828b0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x58828b4) returned 0x0
	[0190.618] IMarshal:GetUnmarshalClass (in: This=0x58828b4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.618] IUnknown:Release (This=0x58828b4) returned 0x3
	[0190.618] IUnknown:Release (This=0x58828b0) returned 0x2
	[0190.618] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.619] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.619] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.619] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.619] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.619] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.619] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.619] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876f98) returned 0x0
	[0190.620] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f98, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876f98) returned 0x0
	[0190.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f98, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f98, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.620] WbemDefPath:IUnknown:AddRef (This=0x5876f98) returned 0x3
	[0190.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f98, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f98, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f98, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5879480) returned 0x0
	[0190.620] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5879480, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.620] WbemDefPath:IUnknown:Release (This=0x5879480) returned 0x3
	[0190.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f98, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.620] WbemDefPath:IUnknown:Release (This=0x5876f98) returned 0x2
	[0190.620] WbemDefPath:IUnknown:Release (This=0x5876f98) returned 0x1
	[0190.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876f98, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876f98) returned 0x0
	[0190.620] WbemDefPath:IUnknown:AddRef (This=0x5876f98) returned 0x3
	[0190.620] WbemDefPath:IUnknown:Release (This=0x5876f98) returned 0x2
	[0190.620] WbemDefPath:IWbemPath:SetText (This=0x5876f98, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3944\"") returned 0x0
	[0190.620] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.620] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.620] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.621] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.621] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.621] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.621] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.621] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x58823e8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.622] IUnknown:AddRef (This=0x58823e8) returned 0x3
	[0190.622] IUnknown:QueryInterface (in: This=0x58823e8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.622] IUnknown:QueryInterface (in: This=0x58823e8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.622] IUnknown:QueryInterface (in: This=0x58823e8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x58823ec) returned 0x0
	[0190.622] IMarshal:GetUnmarshalClass (in: This=0x58823ec, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.622] IUnknown:Release (This=0x58823ec) returned 0x3
	[0190.622] IUnknown:Release (This=0x58823e8) returned 0x2
	[0190.622] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.622] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.622] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.622] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.622] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.623] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.623] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.624] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x58770e8) returned 0x0
	[0190.624] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x58770e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x58770e8) returned 0x0
	[0190.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x58770e8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x58770e8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.624] WbemDefPath:IUnknown:AddRef (This=0x58770e8) returned 0x3
	[0190.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x58770e8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x58770e8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x58770e8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5879318) returned 0x0
	[0190.624] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5879318, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.624] WbemDefPath:IUnknown:Release (This=0x5879318) returned 0x3
	[0190.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x58770e8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.624] WbemDefPath:IUnknown:Release (This=0x58770e8) returned 0x2
	[0190.624] WbemDefPath:IUnknown:Release (This=0x58770e8) returned 0x1
	[0190.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x58770e8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x58770e8) returned 0x0
	[0190.624] WbemDefPath:IUnknown:AddRef (This=0x58770e8) returned 0x3
	[0190.624] WbemDefPath:IUnknown:Release (This=0x58770e8) returned 0x2
	[0190.624] WbemDefPath:IWbemPath:SetText (This=0x58770e8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3964\"") returned 0x0
	[0190.624] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.624] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.625] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.625] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.625] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.625] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.625] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.625] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5882f10, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.626] IUnknown:AddRef (This=0x5882f10) returned 0x3
	[0190.626] IUnknown:QueryInterface (in: This=0x5882f10, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.626] IUnknown:QueryInterface (in: This=0x5882f10, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.626] IUnknown:QueryInterface (in: This=0x5882f10, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5882f14) returned 0x0
	[0190.626] IMarshal:GetUnmarshalClass (in: This=0x5882f14, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.626] IUnknown:Release (This=0x5882f14) returned 0x3
	[0190.626] IUnknown:Release (This=0x5882f10) returned 0x2
	[0190.626] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.626] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.626] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.626] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.626] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.627] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.627] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.627] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876cf8) returned 0x0
	[0190.627] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.627] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876cf8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876cf8) returned 0x0
	[0190.627] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876cf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.627] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876cf8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.628] WbemDefPath:IUnknown:AddRef (This=0x5876cf8) returned 0x3
	[0190.628] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876cf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.628] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876cf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.628] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876cf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x58796f0) returned 0x0
	[0190.628] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58796f0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.628] WbemDefPath:IUnknown:Release (This=0x58796f0) returned 0x3
	[0190.628] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876cf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.628] WbemDefPath:IUnknown:Release (This=0x5876cf8) returned 0x2
	[0190.628] WbemDefPath:IUnknown:Release (This=0x5876cf8) returned 0x1
	[0190.628] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876cf8, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876cf8) returned 0x0
	[0190.628] WbemDefPath:IUnknown:AddRef (This=0x5876cf8) returned 0x3
	[0190.628] WbemDefPath:IUnknown:Release (This=0x5876cf8) returned 0x2
	[0190.628] WbemDefPath:IWbemPath:SetText (This=0x5876cf8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2348\"") returned 0x0
	[0190.628] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.628] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.628] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.628] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.628] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.628] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.629] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.629] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5882a48, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.629] IUnknown:AddRef (This=0x5882a48) returned 0x3
	[0190.629] IUnknown:QueryInterface (in: This=0x5882a48, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.629] IUnknown:QueryInterface (in: This=0x5882a48, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.629] IUnknown:QueryInterface (in: This=0x5882a48, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5882a4c) returned 0x0
	[0190.629] IMarshal:GetUnmarshalClass (in: This=0x5882a4c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.630] IUnknown:Release (This=0x5882a4c) returned 0x3
	[0190.630] IUnknown:Release (This=0x5882a48) returned 0x2
	[0190.630] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.630] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.630] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.630] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.630] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.631] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.631] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876d68) returned 0x0
	[0190.631] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876d68, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876d68) returned 0x0
	[0190.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876d68, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876d68, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.631] WbemDefPath:IUnknown:AddRef (This=0x5876d68) returned 0x3
	[0190.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876d68, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876d68, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876d68, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x58797f8) returned 0x0
	[0190.631] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x58797f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.631] WbemDefPath:IUnknown:Release (This=0x58797f8) returned 0x3
	[0190.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876d68, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.631] WbemDefPath:IUnknown:Release (This=0x5876d68) returned 0x2
	[0190.632] WbemDefPath:IUnknown:Release (This=0x5876d68) returned 0x1
	[0190.632] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876d68, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876d68) returned 0x0
	[0190.632] WbemDefPath:IUnknown:AddRef (This=0x5876d68) returned 0x3
	[0190.632] WbemDefPath:IUnknown:Release (This=0x5876d68) returned 0x2
	[0190.632] WbemDefPath:IWbemPath:SetText (This=0x5876d68, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1776\"") returned 0x0
	[0190.632] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.632] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.632] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.632] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.632] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.632] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.632] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.632] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x58830a8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.633] IUnknown:AddRef (This=0x58830a8) returned 0x3
	[0190.633] IUnknown:QueryInterface (in: This=0x58830a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.633] IUnknown:QueryInterface (in: This=0x58830a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.633] IUnknown:QueryInterface (in: This=0x58830a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x58830ac) returned 0x0
	[0190.633] IMarshal:GetUnmarshalClass (in: This=0x58830ac, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.634] IUnknown:Release (This=0x58830ac) returned 0x3
	[0190.634] IUnknown:Release (This=0x58830a8) returned 0x2
	[0190.634] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.634] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.634] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.634] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.634] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.635] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.635] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5877008) returned 0x0
	[0190.635] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877008, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5877008) returned 0x0
	[0190.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877008, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877008, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.636] WbemDefPath:IUnknown:AddRef (This=0x5877008) returned 0x3
	[0190.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877008, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877008, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877008, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5879a38) returned 0x0
	[0190.637] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5879a38, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.637] WbemDefPath:IUnknown:Release (This=0x5879a38) returned 0x3
	[0190.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877008, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.637] WbemDefPath:IUnknown:Release (This=0x5877008) returned 0x2
	[0190.637] WbemDefPath:IUnknown:Release (This=0x5877008) returned 0x1
	[0190.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877008, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5877008) returned 0x0
	[0190.637] WbemDefPath:IUnknown:AddRef (This=0x5877008) returned 0x3
	[0190.637] WbemDefPath:IUnknown:Release (This=0x5877008) returned 0x2
	[0190.637] WbemDefPath:IWbemPath:SetText (This=0x5877008, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1796\"") returned 0x0
	[0190.637] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.637] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.637] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.637] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.637] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.637] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.638] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.638] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5883240, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.638] IUnknown:AddRef (This=0x5883240) returned 0x3
	[0190.638] IUnknown:QueryInterface (in: This=0x5883240, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.638] IUnknown:QueryInterface (in: This=0x5883240, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.638] IUnknown:QueryInterface (in: This=0x5883240, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5883244) returned 0x0
	[0190.639] IMarshal:GetUnmarshalClass (in: This=0x5883244, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.639] IUnknown:Release (This=0x5883244) returned 0x3
	[0190.639] IUnknown:Release (This=0x5883240) returned 0x2
	[0190.639] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.639] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.639] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.639] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.639] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.640] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.640] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876908) returned 0x0
	[0190.640] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876908, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876908) returned 0x0
	[0190.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876908, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876908, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.640] WbemDefPath:IUnknown:AddRef (This=0x5876908) returned 0x3
	[0190.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876908, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876908, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876908, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5879d98) returned 0x0
	[0190.640] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5879d98, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.640] WbemDefPath:IUnknown:Release (This=0x5879d98) returned 0x3
	[0190.641] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876908, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.641] WbemDefPath:IUnknown:Release (This=0x5876908) returned 0x2
	[0190.641] WbemDefPath:IUnknown:Release (This=0x5876908) returned 0x1
	[0190.641] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876908, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876908) returned 0x0
	[0190.641] WbemDefPath:IUnknown:AddRef (This=0x5876908) returned 0x3
	[0190.641] WbemDefPath:IUnknown:Release (This=0x5876908) returned 0x2
	[0190.641] WbemDefPath:IWbemPath:SetText (This=0x5876908, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3648\"") returned 0x0
	[0190.641] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.641] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.641] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.641] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.641] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.641] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.641] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.641] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x58818c0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.642] IUnknown:AddRef (This=0x58818c0) returned 0x3
	[0190.642] IUnknown:QueryInterface (in: This=0x58818c0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.642] IUnknown:QueryInterface (in: This=0x58818c0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.642] IUnknown:QueryInterface (in: This=0x58818c0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x58818c4) returned 0x0
	[0190.642] IMarshal:GetUnmarshalClass (in: This=0x58818c4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.642] IUnknown:Release (This=0x58818c4) returned 0x3
	[0190.642] IUnknown:Release (This=0x58818c0) returned 0x2
	[0190.642] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.642] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.642] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.642] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.642] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.643] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.643] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876358) returned 0x0
	[0190.643] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876358, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x5876358) returned 0x0
	[0190.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876358, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876358, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.644] WbemDefPath:IUnknown:AddRef (This=0x5876358) returned 0x3
	[0190.644] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876358, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.644] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876358, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.644] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876358, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5879d80) returned 0x0
	[0190.644] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5879d80, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.644] WbemDefPath:IUnknown:Release (This=0x5879d80) returned 0x3
	[0190.644] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876358, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.644] WbemDefPath:IUnknown:Release (This=0x5876358) returned 0x2
	[0190.644] WbemDefPath:IUnknown:Release (This=0x5876358) returned 0x1
	[0190.644] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876358, riid=0x19f0c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x5876358) returned 0x0
	[0190.644] WbemDefPath:IUnknown:AddRef (This=0x5876358) returned 0x3
	[0190.644] WbemDefPath:IUnknown:Release (This=0x5876358) returned 0x2
	[0190.644] WbemDefPath:IWbemPath:SetText (This=0x5876358, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1040\"") returned 0x0
	[0190.644] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.644] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.644] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.644] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.644] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.644] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.644] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.644] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x58833d8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.645] IUnknown:AddRef (This=0x58833d8) returned 0x3
	[0190.645] IUnknown:QueryInterface (in: This=0x58833d8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.645] IUnknown:QueryInterface (in: This=0x58833d8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.645] IUnknown:QueryInterface (in: This=0x58833d8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x58833dc) returned 0x0
	[0190.645] IMarshal:GetUnmarshalClass (in: This=0x58833dc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.645] IUnknown:Release (This=0x58833dc) returned 0x3
	[0190.646] IUnknown:Release (This=0x58833d8) returned 0x2
	[0190.646] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.646] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.646] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.646] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.646] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.646] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.647] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x58766d8) returned 0x0
	[0190.647] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x58766d8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x58766d8) returned 0x0
	[0190.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x58766d8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x0) returned 0x80004002
	[0190.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x58766d8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.647] WbemDefPath:IUnknown:AddRef (This=0x58766d8) returned 0x3
	[0190.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x58766d8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x58766d8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x58766d8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587a050) returned 0x0
	[0190.647] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587a050, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.647] WbemDefPath:IUnknown:Release (This=0x587a050) returned 0x3
	[0190.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x58766d8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e798 | out: ppvObject=0x19e798*=0x0) returned 0x80004002
	[0190.647] WbemDefPath:IUnknown:Release (This=0x58766d8) returned 0x2
	[0190.647] WbemDefPath:IUnknown:Release (This=0x58766d8) returned 0x1
	[0190.647] WbemDefPath:IUnknown:Release (This=0x58766d8) returned 0x2
	[0190.647] WbemDefPath:IWbemPath:SetText (This=0x58766d8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4104\"") returned 0x0
	[0190.647] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.647] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.647] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.648] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.648] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.648] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.648] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.648] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5881a58, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.648] IUnknown:AddRef (This=0x5881a58) returned 0x3
	[0190.648] IUnknown:QueryInterface (in: This=0x5881a58, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.648] IUnknown:QueryInterface (in: This=0x5881a58, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.649] IUnknown:QueryInterface (in: This=0x5881a58, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5881a5c) returned 0x0
	[0190.649] IMarshal:GetUnmarshalClass (in: This=0x5881a5c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.649] IUnknown:Release (This=0x5881a5c) returned 0x3
	[0190.649] IUnknown:Release (This=0x5881a58) returned 0x2
	[0190.649] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.649] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.649] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.649] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.649] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.650] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.650] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.650] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x58767b8) returned 0x0
	[0190.650] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.650] WbemDefPath:IUnknown:AddRef (This=0x58767b8) returned 0x3
	[0190.650] WbemDefPath:IUnknown:QueryInterface (in: This=0x58767b8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.650] WbemDefPath:IUnknown:QueryInterface (in: This=0x58767b8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.650] WbemDefPath:IUnknown:QueryInterface (in: This=0x58767b8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5879fd8) returned 0x0
	[0190.650] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5879fd8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.650] WbemDefPath:IUnknown:Release (This=0x5879fd8) returned 0x3
	[0190.650] WbemDefPath:IUnknown:Release (This=0x58767b8) returned 0x2
	[0190.650] WbemDefPath:IUnknown:Release (This=0x58767b8) returned 0x1
	[0190.650] WbemDefPath:IUnknown:Release (This=0x58767b8) returned 0x2
	[0190.650] WbemDefPath:IWbemPath:SetText (This=0x58767b8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4112\"") returned 0x0
	[0190.651] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.651] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.651] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.651] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.651] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.651] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.651] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.651] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5881bf0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.653] IUnknown:AddRef (This=0x5881bf0) returned 0x3
	[0190.653] IUnknown:QueryInterface (in: This=0x5881bf0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.653] IUnknown:QueryInterface (in: This=0x5881bf0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.653] IUnknown:QueryInterface (in: This=0x5881bf0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5881bf4) returned 0x0
	[0190.653] IMarshal:GetUnmarshalClass (in: This=0x5881bf4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.653] IUnknown:Release (This=0x5881bf4) returned 0x3
	[0190.653] IUnknown:Release (This=0x5881bf0) returned 0x2
	[0190.653] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.653] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.653] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.653] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.653] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.654] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.654] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.654] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876e48) returned 0x0
	[0190.654] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.654] WbemDefPath:IUnknown:AddRef (This=0x5876e48) returned 0x3
	[0190.654] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876e48, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.654] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876e48, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.654] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876e48, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587a398) returned 0x0
	[0190.654] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587a398, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.654] WbemDefPath:IUnknown:Release (This=0x587a398) returned 0x3
	[0190.655] WbemDefPath:IUnknown:Release (This=0x5876e48) returned 0x2
	[0190.655] WbemDefPath:IUnknown:Release (This=0x5876e48) returned 0x1
	[0190.655] WbemDefPath:IUnknown:Release (This=0x5876e48) returned 0x2
	[0190.655] WbemDefPath:IWbemPath:SetText (This=0x5876e48, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4120\"") returned 0x0
	[0190.655] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.655] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.655] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.655] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.655] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.655] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.655] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.655] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5881d88, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.656] IUnknown:AddRef (This=0x5881d88) returned 0x3
	[0190.656] IUnknown:QueryInterface (in: This=0x5881d88, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.656] IUnknown:QueryInterface (in: This=0x5881d88, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.656] IUnknown:QueryInterface (in: This=0x5881d88, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5881d8c) returned 0x0
	[0190.656] IMarshal:GetUnmarshalClass (in: This=0x5881d8c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.656] IUnknown:Release (This=0x5881d8c) returned 0x3
	[0190.656] IUnknown:Release (This=0x5881d88) returned 0x2
	[0190.656] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.656] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.657] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.657] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.657] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.657] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.657] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.658] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876518) returned 0x0
	[0190.658] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.658] WbemDefPath:IUnknown:AddRef (This=0x5876518) returned 0x3
	[0190.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876518, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876518, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876518, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587a668) returned 0x0
	[0190.658] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587a668, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.658] WbemDefPath:IUnknown:Release (This=0x587a668) returned 0x3
	[0190.658] WbemDefPath:IUnknown:Release (This=0x5876518) returned 0x2
	[0190.658] WbemDefPath:IUnknown:Release (This=0x5876518) returned 0x1
	[0190.658] WbemDefPath:IUnknown:Release (This=0x5876518) returned 0x2
	[0190.658] WbemDefPath:IWbemPath:SetText (This=0x5876518, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4128\"") returned 0x0
	[0190.658] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.658] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.658] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.658] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.659] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.659] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.667] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.667] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5881f20, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.668] IUnknown:AddRef (This=0x5881f20) returned 0x3
	[0190.669] IUnknown:QueryInterface (in: This=0x5881f20, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.669] IUnknown:QueryInterface (in: This=0x5881f20, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.669] IUnknown:QueryInterface (in: This=0x5881f20, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5881f24) returned 0x0
	[0190.669] IMarshal:GetUnmarshalClass (in: This=0x5881f24, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.669] IUnknown:Release (This=0x5881f24) returned 0x3
	[0190.669] IUnknown:Release (This=0x5881f20) returned 0x2
	[0190.670] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.670] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.670] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.670] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.670] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.671] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.671] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.671] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876828) returned 0x0
	[0190.671] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.671] WbemDefPath:IUnknown:AddRef (This=0x5876828) returned 0x3
	[0190.671] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876828, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.671] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876828, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.671] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876828, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587a3b0) returned 0x0
	[0190.671] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587a3b0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.671] WbemDefPath:IUnknown:Release (This=0x587a3b0) returned 0x3
	[0190.671] WbemDefPath:IUnknown:Release (This=0x5876828) returned 0x2
	[0190.671] WbemDefPath:IUnknown:Release (This=0x5876828) returned 0x1
	[0190.671] WbemDefPath:IUnknown:Release (This=0x5876828) returned 0x2
	[0190.671] WbemDefPath:IWbemPath:SetText (This=0x5876828, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4156\"") returned 0x0
	[0190.671] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.672] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.672] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.672] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.672] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.672] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.672] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.672] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x58820b8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.673] IUnknown:AddRef (This=0x58820b8) returned 0x3
	[0190.673] IUnknown:QueryInterface (in: This=0x58820b8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.673] IUnknown:QueryInterface (in: This=0x58820b8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.673] IUnknown:QueryInterface (in: This=0x58820b8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x58820bc) returned 0x0
	[0190.673] IMarshal:GetUnmarshalClass (in: This=0x58820bc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.673] IUnknown:Release (This=0x58820bc) returned 0x3
	[0190.673] IUnknown:Release (This=0x58820b8) returned 0x2
	[0190.673] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.673] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.673] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.673] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.673] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.675] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.675] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5876eb8) returned 0x0
	[0190.675] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.675] WbemDefPath:IUnknown:AddRef (This=0x5876eb8) returned 0x3
	[0190.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876eb8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876eb8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x5876eb8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587a8a8) returned 0x0
	[0190.675] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587a8a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.675] WbemDefPath:IUnknown:Release (This=0x587a8a8) returned 0x3
	[0190.675] WbemDefPath:IUnknown:Release (This=0x5876eb8) returned 0x2
	[0190.675] WbemDefPath:IUnknown:Release (This=0x5876eb8) returned 0x1
	[0190.676] WbemDefPath:IUnknown:Release (This=0x5876eb8) returned 0x2
	[0190.676] WbemDefPath:IWbemPath:SetText (This=0x5876eb8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4164\"") returned 0x0
	[0190.676] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.676] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.676] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.676] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.676] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.676] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.676] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.676] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5882250, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.677] IUnknown:AddRef (This=0x5882250) returned 0x3
	[0190.677] IUnknown:QueryInterface (in: This=0x5882250, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.677] IUnknown:QueryInterface (in: This=0x5882250, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.677] IUnknown:QueryInterface (in: This=0x5882250, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5882254) returned 0x0
	[0190.677] IMarshal:GetUnmarshalClass (in: This=0x5882254, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.677] IUnknown:Release (This=0x5882254) returned 0x3
	[0190.677] IUnknown:Release (This=0x5882250) returned 0x2
	[0190.677] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.677] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.677] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.677] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.677] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.678] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.678] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.678] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x58771c8) returned 0x0
	[0190.678] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.678] WbemDefPath:IUnknown:AddRef (This=0x58771c8) returned 0x3
	[0190.678] WbemDefPath:IUnknown:QueryInterface (in: This=0x58771c8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.678] WbemDefPath:IUnknown:QueryInterface (in: This=0x58771c8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.678] WbemDefPath:IUnknown:QueryInterface (in: This=0x58771c8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587a6b0) returned 0x0
	[0190.679] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587a6b0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.679] WbemDefPath:IUnknown:Release (This=0x587a6b0) returned 0x3
	[0190.679] WbemDefPath:IUnknown:Release (This=0x58771c8) returned 0x2
	[0190.679] WbemDefPath:IUnknown:Release (This=0x58771c8) returned 0x1
	[0190.679] WbemDefPath:IUnknown:Release (This=0x58771c8) returned 0x2
	[0190.679] WbemDefPath:IWbemPath:SetText (This=0x58771c8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4176\"") returned 0x0
	[0190.679] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.679] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.679] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.679] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.679] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.679] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.679] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.679] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588b818, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.680] IUnknown:AddRef (This=0x588b818) returned 0x3
	[0190.680] IUnknown:QueryInterface (in: This=0x588b818, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.680] IUnknown:QueryInterface (in: This=0x588b818, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.680] IUnknown:QueryInterface (in: This=0x588b818, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588b81c) returned 0x0
	[0190.680] IMarshal:GetUnmarshalClass (in: This=0x588b81c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.680] IUnknown:Release (This=0x588b81c) returned 0x3
	[0190.680] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.681] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.681] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.681] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.681] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.681] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.681] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.681] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5877238) returned 0x0
	[0190.681] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.682] WbemDefPath:IUnknown:AddRef (This=0x5877238) returned 0x3
	[0190.682] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877238, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.682] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877238, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.682] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877238, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587aaa0) returned 0x0
	[0190.682] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587aaa0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.682] WbemDefPath:IUnknown:Release (This=0x587aaa0) returned 0x3
	[0190.682] WbemDefPath:IUnknown:Release (This=0x5877238) returned 0x2
	[0190.682] WbemDefPath:IUnknown:Release (This=0x5877238) returned 0x1
	[0190.682] WbemDefPath:IUnknown:Release (This=0x5877238) returned 0x2
	[0190.682] WbemDefPath:IWbemPath:SetText (This=0x5877238, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4184\"") returned 0x0
	[0190.682] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.682] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.682] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.682] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.682] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.682] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.682] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.682] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588ae88, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.683] IUnknown:AddRef (This=0x588ae88) returned 0x3
	[0190.683] IUnknown:QueryInterface (in: This=0x588ae88, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.683] IUnknown:QueryInterface (in: This=0x588ae88, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.683] IUnknown:QueryInterface (in: This=0x588ae88, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588ae8c) returned 0x0
	[0190.683] IMarshal:GetUnmarshalClass (in: This=0x588ae8c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.683] IUnknown:Release (This=0x588ae8c) returned 0x3
	[0190.684] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.684] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.684] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.684] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.684] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.684] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.685] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x5877158) returned 0x0
	[0190.685] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.685] WbemDefPath:IUnknown:AddRef (This=0x5877158) returned 0x3
	[0190.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877158, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877158, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x5877158, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587ac50) returned 0x0
	[0190.685] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587ac50, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.685] WbemDefPath:IUnknown:Release (This=0x587ac50) returned 0x3
	[0190.685] WbemDefPath:IUnknown:Release (This=0x5877158) returned 0x2
	[0190.685] WbemDefPath:IUnknown:Release (This=0x5877158) returned 0x1
	[0190.685] WbemDefPath:IUnknown:Release (This=0x5877158) returned 0x2
	[0190.685] WbemDefPath:IWbemPath:SetText (This=0x5877158, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4212\"") returned 0x0
	[0190.685] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.686] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.686] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.686] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.686] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.686] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.686] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.686] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588b020, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.687] IUnknown:AddRef (This=0x588b020) returned 0x3
	[0190.687] IUnknown:QueryInterface (in: This=0x588b020, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.687] IUnknown:QueryInterface (in: This=0x588b020, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.687] IUnknown:QueryInterface (in: This=0x588b020, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588b024) returned 0x0
	[0190.687] IMarshal:GetUnmarshalClass (in: This=0x588b024, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.687] IUnknown:Release (This=0x588b024) returned 0x3
	[0190.687] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.687] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.687] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.687] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.687] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.688] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.688] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.688] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x58772a8) returned 0x0
	[0190.688] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.688] WbemDefPath:IUnknown:AddRef (This=0x58772a8) returned 0x3
	[0190.688] WbemDefPath:IUnknown:QueryInterface (in: This=0x58772a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.688] WbemDefPath:IUnknown:QueryInterface (in: This=0x58772a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.688] WbemDefPath:IUnknown:QueryInterface (in: This=0x58772a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587ace0) returned 0x0
	[0190.689] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587ace0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.689] WbemDefPath:IUnknown:Release (This=0x587ace0) returned 0x3
	[0190.689] WbemDefPath:IUnknown:Release (This=0x58772a8) returned 0x2
	[0190.689] WbemDefPath:IUnknown:Release (This=0x58772a8) returned 0x1
	[0190.689] WbemDefPath:IUnknown:Release (This=0x58772a8) returned 0x2
	[0190.689] WbemDefPath:IWbemPath:SetText (This=0x58772a8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4240\"") returned 0x0
	[0190.689] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.689] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.689] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.689] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.689] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.689] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.689] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.689] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588b1b8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.692] IUnknown:AddRef (This=0x588b1b8) returned 0x3
	[0190.692] IUnknown:QueryInterface (in: This=0x588b1b8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.692] IUnknown:QueryInterface (in: This=0x588b1b8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.692] IUnknown:QueryInterface (in: This=0x588b1b8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588b1bc) returned 0x0
	[0190.693] IMarshal:GetUnmarshalClass (in: This=0x588b1bc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.693] IUnknown:Release (This=0x588b1bc) returned 0x3
	[0190.693] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.693] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.693] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.693] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.693] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.694] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.694] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.694] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588db50) returned 0x0
	[0190.694] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.695] WbemDefPath:IUnknown:AddRef (This=0x588db50) returned 0x3
	[0190.695] WbemDefPath:IUnknown:QueryInterface (in: This=0x588db50, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.695] WbemDefPath:IUnknown:QueryInterface (in: This=0x588db50, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.695] WbemDefPath:IUnknown:QueryInterface (in: This=0x588db50, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587ad70) returned 0x0
	[0190.695] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587ad70, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.695] WbemDefPath:IUnknown:Release (This=0x587ad70) returned 0x3
	[0190.695] WbemDefPath:IUnknown:Release (This=0x588db50) returned 0x2
	[0190.695] WbemDefPath:IUnknown:Release (This=0x588db50) returned 0x1
	[0190.695] WbemDefPath:IUnknown:Release (This=0x588db50) returned 0x2
	[0190.695] WbemDefPath:IWbemPath:SetText (This=0x588db50, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4248\"") returned 0x0
	[0190.696] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.696] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.696] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.696] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.702] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.702] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.702] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.702] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588c010, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.703] IUnknown:AddRef (This=0x588c010) returned 0x3
	[0190.703] IUnknown:QueryInterface (in: This=0x588c010, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.703] IUnknown:QueryInterface (in: This=0x588c010, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.703] IUnknown:QueryInterface (in: This=0x588c010, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588c014) returned 0x0
	[0190.703] IMarshal:GetUnmarshalClass (in: This=0x588c014, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.703] IUnknown:Release (This=0x588c014) returned 0x3
	[0190.704] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.704] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.704] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.704] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.704] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.705] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.705] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.705] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e560) returned 0x0
	[0190.705] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.705] WbemDefPath:IUnknown:AddRef (This=0x588e560) returned 0x3
	[0190.705] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e560, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.705] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e560, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.705] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e560, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587b130) returned 0x0
	[0190.705] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587b130, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.705] WbemDefPath:IUnknown:Release (This=0x587b130) returned 0x3
	[0190.705] WbemDefPath:IUnknown:Release (This=0x588e560) returned 0x2
	[0190.705] WbemDefPath:IUnknown:Release (This=0x588e560) returned 0x1
	[0190.706] WbemDefPath:IUnknown:Release (This=0x588e560) returned 0x2
	[0190.706] WbemDefPath:IWbemPath:SetText (This=0x588e560, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4260\"") returned 0x0
	[0190.706] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.706] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.706] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.706] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.706] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.706] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.706] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.706] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588be78, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.707] IUnknown:AddRef (This=0x588be78) returned 0x3
	[0190.707] IUnknown:QueryInterface (in: This=0x588be78, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.707] IUnknown:QueryInterface (in: This=0x588be78, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.707] IUnknown:QueryInterface (in: This=0x588be78, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588be7c) returned 0x0
	[0190.707] IMarshal:GetUnmarshalClass (in: This=0x588be7c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.707] IUnknown:Release (This=0x588be7c) returned 0x3
	[0190.707] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.708] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.708] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.708] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.708] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.708] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.709] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.709] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588da70) returned 0x0
	[0190.709] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.709] WbemDefPath:IUnknown:AddRef (This=0x588da70) returned 0x3
	[0190.709] WbemDefPath:IUnknown:QueryInterface (in: This=0x588da70, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.709] WbemDefPath:IUnknown:QueryInterface (in: This=0x588da70, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.709] WbemDefPath:IUnknown:QueryInterface (in: This=0x588da70, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x587b2f8) returned 0x0
	[0190.709] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x587b2f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.709] WbemDefPath:IUnknown:Release (This=0x587b2f8) returned 0x3
	[0190.709] WbemDefPath:IUnknown:Release (This=0x588da70) returned 0x2
	[0190.709] WbemDefPath:IUnknown:Release (This=0x588da70) returned 0x1
	[0190.709] WbemDefPath:IUnknown:Release (This=0x588da70) returned 0x2
	[0190.709] WbemDefPath:IWbemPath:SetText (This=0x588da70, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4276\"") returned 0x0
	[0190.710] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.710] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.710] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.710] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.710] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.710] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.710] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.710] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588a828, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.711] IUnknown:AddRef (This=0x588a828) returned 0x3
	[0190.711] IUnknown:QueryInterface (in: This=0x588a828, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.711] IUnknown:QueryInterface (in: This=0x588a828, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.711] IUnknown:QueryInterface (in: This=0x588a828, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588a82c) returned 0x0
	[0190.711] IMarshal:GetUnmarshalClass (in: This=0x588a82c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.711] IUnknown:Release (This=0x588a82c) returned 0x3
	[0190.711] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.712] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.712] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.712] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.712] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.712] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.713] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.713] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588d920) returned 0x0
	[0190.713] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.713] WbemDefPath:IUnknown:AddRef (This=0x588d920) returned 0x3
	[0190.713] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d920, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.713] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d920, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.713] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d920, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd22f8) returned 0x0
	[0190.713] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd22f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.713] WbemDefPath:IUnknown:Release (This=0x5dd22f8) returned 0x3
	[0190.713] WbemDefPath:IUnknown:Release (This=0x588d920) returned 0x2
	[0190.713] WbemDefPath:IUnknown:Release (This=0x588d920) returned 0x1
	[0190.713] WbemDefPath:IUnknown:Release (This=0x588d920) returned 0x2
	[0190.714] WbemDefPath:IWbemPath:SetText (This=0x588d920, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4284\"") returned 0x0
	[0190.714] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.714] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.714] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.714] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.714] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.714] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.714] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.714] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588b9b0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.715] IUnknown:AddRef (This=0x588b9b0) returned 0x3
	[0190.715] IUnknown:QueryInterface (in: This=0x588b9b0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.715] IUnknown:QueryInterface (in: This=0x588b9b0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.715] IUnknown:QueryInterface (in: This=0x588b9b0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588b9b4) returned 0x0
	[0190.715] IMarshal:GetUnmarshalClass (in: This=0x588b9b4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.715] IUnknown:Release (This=0x588b9b4) returned 0x3
	[0190.715] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.715] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.715] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.715] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.715] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.717] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.717] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.717] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588dbc0) returned 0x0
	[0190.717] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.717] WbemDefPath:IUnknown:AddRef (This=0x588dbc0) returned 0x3
	[0190.717] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dbc0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.717] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dbc0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.717] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dbc0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd2658) returned 0x0
	[0190.717] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd2658, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.717] WbemDefPath:IUnknown:Release (This=0x5dd2658) returned 0x3
	[0190.717] WbemDefPath:IUnknown:Release (This=0x588dbc0) returned 0x2
	[0190.717] WbemDefPath:IUnknown:Release (This=0x588dbc0) returned 0x1
	[0190.717] WbemDefPath:IUnknown:Release (This=0x588dbc0) returned 0x2
	[0190.717] WbemDefPath:IWbemPath:SetText (This=0x588dbc0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4296\"") returned 0x0
	[0190.718] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.718] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.718] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.718] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.718] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.718] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.718] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.718] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588bb48, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.725] IUnknown:AddRef (This=0x588bb48) returned 0x3
	[0190.725] IUnknown:QueryInterface (in: This=0x588bb48, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.726] IUnknown:QueryInterface (in: This=0x588bb48, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.726] IUnknown:QueryInterface (in: This=0x588bb48, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588bb4c) returned 0x0
	[0190.726] IMarshal:GetUnmarshalClass (in: This=0x588bb4c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.726] IUnknown:Release (This=0x588bb4c) returned 0x3
	[0190.726] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.726] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.726] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.726] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.726] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.727] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.727] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588de60) returned 0x0
	[0190.727] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.727] WbemDefPath:IUnknown:AddRef (This=0x588de60) returned 0x3
	[0190.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x588de60, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x588de60, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x588de60, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd2808) returned 0x0
	[0190.727] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd2808, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.727] WbemDefPath:IUnknown:Release (This=0x5dd2808) returned 0x3
	[0190.727] WbemDefPath:IUnknown:Release (This=0x588de60) returned 0x2
	[0190.727] WbemDefPath:IUnknown:Release (This=0x588de60) returned 0x1
	[0190.727] WbemDefPath:IUnknown:Release (This=0x588de60) returned 0x2
	[0190.727] WbemDefPath:IWbemPath:SetText (This=0x588de60, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4304\"") returned 0x0
	[0190.728] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.728] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.728] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.728] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.728] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.728] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.728] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.728] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588b350, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.733] IUnknown:AddRef (This=0x588b350) returned 0x3
	[0190.733] IUnknown:QueryInterface (in: This=0x588b350, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.733] IUnknown:QueryInterface (in: This=0x588b350, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.733] IUnknown:QueryInterface (in: This=0x588b350, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588b354) returned 0x0
	[0190.733] IMarshal:GetUnmarshalClass (in: This=0x588b354, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.733] IUnknown:Release (This=0x588b354) returned 0x3
	[0190.733] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.733] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.733] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.733] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.733] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.734] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.734] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588dc30) returned 0x0
	[0190.734] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.734] WbemDefPath:IUnknown:AddRef (This=0x588dc30) returned 0x3
	[0190.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dc30, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dc30, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dc30, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd2aa8) returned 0x0
	[0190.734] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd2aa8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.734] WbemDefPath:IUnknown:Release (This=0x5dd2aa8) returned 0x3
	[0190.735] WbemDefPath:IUnknown:Release (This=0x588dc30) returned 0x2
	[0190.735] WbemDefPath:IUnknown:Release (This=0x588dc30) returned 0x1
	[0190.735] WbemDefPath:IUnknown:Release (This=0x588dc30) returned 0x2
	[0190.737] WbemDefPath:IWbemPath:SetText (This=0x588dc30, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4320\"") returned 0x0
	[0190.737] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.737] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.737] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.737] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.737] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.737] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.737] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.737] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588c670, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.738] IUnknown:AddRef (This=0x588c670) returned 0x3
	[0190.738] IUnknown:QueryInterface (in: This=0x588c670, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.738] IUnknown:QueryInterface (in: This=0x588c670, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.738] IUnknown:QueryInterface (in: This=0x588c670, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588c674) returned 0x0
	[0190.738] IMarshal:GetUnmarshalClass (in: This=0x588c674, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.738] IUnknown:Release (This=0x588c674) returned 0x3
	[0190.739] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.739] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.739] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.739] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.739] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.739] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.740] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.740] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588dd10) returned 0x0
	[0190.740] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.740] WbemDefPath:IUnknown:AddRef (This=0x588dd10) returned 0x3
	[0190.740] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dd10, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.740] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dd10, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.740] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dd10, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd2910) returned 0x0
	[0190.740] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd2910, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.740] WbemDefPath:IUnknown:Release (This=0x5dd2910) returned 0x3
	[0190.740] WbemDefPath:IUnknown:Release (This=0x588dd10) returned 0x2
	[0190.740] WbemDefPath:IUnknown:Release (This=0x588dd10) returned 0x1
	[0190.740] WbemDefPath:IUnknown:Release (This=0x588dd10) returned 0x2
	[0190.740] WbemDefPath:IWbemPath:SetText (This=0x588dd10, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4328\"") returned 0x0
	[0190.740] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.740] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.740] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.740] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.740] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.741] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.741] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.741] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588bce0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.741] IUnknown:AddRef (This=0x588bce0) returned 0x3
	[0190.741] IUnknown:QueryInterface (in: This=0x588bce0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.741] IUnknown:QueryInterface (in: This=0x588bce0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.741] IUnknown:QueryInterface (in: This=0x588bce0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588bce4) returned 0x0
	[0190.742] IMarshal:GetUnmarshalClass (in: This=0x588bce4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.742] IUnknown:Release (This=0x588bce4) returned 0x3
	[0190.742] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.742] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.742] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.742] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.742] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.742] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.743] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.743] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588ddf0) returned 0x0
	[0190.743] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.743] WbemDefPath:IUnknown:AddRef (This=0x588ddf0) returned 0x3
	[0190.743] WbemDefPath:IUnknown:QueryInterface (in: This=0x588ddf0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.743] WbemDefPath:IUnknown:QueryInterface (in: This=0x588ddf0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.743] WbemDefPath:IUnknown:QueryInterface (in: This=0x588ddf0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd2e20) returned 0x0
	[0190.743] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd2e20, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.743] WbemDefPath:IUnknown:Release (This=0x5dd2e20) returned 0x3
	[0190.743] WbemDefPath:IUnknown:Release (This=0x588ddf0) returned 0x2
	[0190.743] WbemDefPath:IUnknown:Release (This=0x588ddf0) returned 0x1
	[0190.743] WbemDefPath:IUnknown:Release (This=0x588ddf0) returned 0x2
	[0190.743] WbemDefPath:IWbemPath:SetText (This=0x588ddf0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4344\"") returned 0x0
	[0190.743] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.743] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.743] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.744] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.744] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.744] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.744] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.744] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588c1a8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.744] IUnknown:AddRef (This=0x588c1a8) returned 0x3
	[0190.744] IUnknown:QueryInterface (in: This=0x588c1a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.744] IUnknown:QueryInterface (in: This=0x588c1a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.744] IUnknown:QueryInterface (in: This=0x588c1a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588c1ac) returned 0x0
	[0190.745] IMarshal:GetUnmarshalClass (in: This=0x588c1ac, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.745] IUnknown:Release (This=0x588c1ac) returned 0x3
	[0190.745] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.745] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.745] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.745] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.745] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.746] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.746] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.746] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e170) returned 0x0
	[0190.746] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.746] WbemDefPath:IUnknown:AddRef (This=0x588e170) returned 0x3
	[0190.746] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e170, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.746] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e170, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.746] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e170, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd2dd8) returned 0x0
	[0190.746] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd2dd8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.746] WbemDefPath:IUnknown:Release (This=0x5dd2dd8) returned 0x3
	[0190.746] WbemDefPath:IUnknown:Release (This=0x588e170) returned 0x2
	[0190.746] WbemDefPath:IUnknown:Release (This=0x588e170) returned 0x1
	[0190.746] WbemDefPath:IUnknown:Release (This=0x588e170) returned 0x2
	[0190.746] WbemDefPath:IWbemPath:SetText (This=0x588e170, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4360\"") returned 0x0
	[0190.746] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.746] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.746] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.746] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.747] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.747] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.747] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.747] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588c340, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.747] IUnknown:AddRef (This=0x588c340) returned 0x3
	[0190.747] IUnknown:QueryInterface (in: This=0x588c340, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.748] IUnknown:QueryInterface (in: This=0x588c340, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.748] IUnknown:QueryInterface (in: This=0x588c340, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588c344) returned 0x0
	[0190.748] IMarshal:GetUnmarshalClass (in: This=0x588c344, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.748] IUnknown:Release (This=0x588c344) returned 0x3
	[0190.748] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.748] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.748] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.748] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.748] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.749] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.749] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.749] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588df40) returned 0x0
	[0190.749] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.749] WbemDefPath:IUnknown:AddRef (This=0x588df40) returned 0x3
	[0190.749] WbemDefPath:IUnknown:QueryInterface (in: This=0x588df40, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.749] WbemDefPath:IUnknown:QueryInterface (in: This=0x588df40, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.749] WbemDefPath:IUnknown:QueryInterface (in: This=0x588df40, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd2fe8) returned 0x0
	[0190.749] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd2fe8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.749] WbemDefPath:IUnknown:Release (This=0x5dd2fe8) returned 0x3
	[0190.749] WbemDefPath:IUnknown:Release (This=0x588df40) returned 0x2
	[0190.749] WbemDefPath:IUnknown:Release (This=0x588df40) returned 0x1
	[0190.749] WbemDefPath:IUnknown:Release (This=0x588df40) returned 0x2
	[0190.749] WbemDefPath:IWbemPath:SetText (This=0x588df40, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4368\"") returned 0x0
	[0190.749] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.749] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.749] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.750] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.750] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.750] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.750] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.750] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588a9c0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.751] IUnknown:AddRef (This=0x588a9c0) returned 0x3
	[0190.751] IUnknown:QueryInterface (in: This=0x588a9c0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.751] IUnknown:QueryInterface (in: This=0x588a9c0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.751] IUnknown:QueryInterface (in: This=0x588a9c0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588a9c4) returned 0x0
	[0190.751] IMarshal:GetUnmarshalClass (in: This=0x588a9c4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.751] IUnknown:Release (This=0x588a9c4) returned 0x3
	[0190.751] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.751] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.751] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.751] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.751] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.752] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.752] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588dfb0) returned 0x0
	[0190.752] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.752] WbemDefPath:IUnknown:AddRef (This=0x588dfb0) returned 0x3
	[0190.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dfb0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dfb0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.756] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dfb0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd2f40) returned 0x0
	[0190.756] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd2f40, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.756] WbemDefPath:IUnknown:Release (This=0x5dd2f40) returned 0x3
	[0190.756] WbemDefPath:IUnknown:Release (This=0x588dfb0) returned 0x2
	[0190.757] WbemDefPath:IUnknown:Release (This=0x588dfb0) returned 0x1
	[0190.757] WbemDefPath:IUnknown:Release (This=0x588dfb0) returned 0x2
	[0190.757] WbemDefPath:IWbemPath:SetText (This=0x588dfb0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4380\"") returned 0x0
	[0190.757] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.757] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.757] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.757] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.757] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.757] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.757] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.757] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588c4d8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.758] IUnknown:AddRef (This=0x588c4d8) returned 0x3
	[0190.758] IUnknown:QueryInterface (in: This=0x588c4d8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.758] IUnknown:QueryInterface (in: This=0x588c4d8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.758] IUnknown:QueryInterface (in: This=0x588c4d8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588c4dc) returned 0x0
	[0190.758] IMarshal:GetUnmarshalClass (in: This=0x588c4dc, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.758] IUnknown:Release (This=0x588c4dc) returned 0x3
	[0190.758] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.758] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.758] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.758] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.758] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.759] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.759] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e4f0) returned 0x0
	[0190.759] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.759] WbemDefPath:IUnknown:AddRef (This=0x588e4f0) returned 0x3
	[0190.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e4f0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e4f0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e4f0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd32e8) returned 0x0
	[0190.759] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd32e8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.759] WbemDefPath:IUnknown:Release (This=0x5dd32e8) returned 0x3
	[0190.760] WbemDefPath:IUnknown:Release (This=0x588e4f0) returned 0x2
	[0190.760] WbemDefPath:IUnknown:Release (This=0x588e4f0) returned 0x1
	[0190.760] WbemDefPath:IUnknown:Release (This=0x588e4f0) returned 0x2
	[0190.760] WbemDefPath:IWbemPath:SetText (This=0x588e4f0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4388\"") returned 0x0
	[0190.760] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.760] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.760] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.760] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.760] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.760] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.761] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.761] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588b4e8, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.761] IUnknown:AddRef (This=0x588b4e8) returned 0x3
	[0190.761] IUnknown:QueryInterface (in: This=0x588b4e8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.762] IUnknown:QueryInterface (in: This=0x588b4e8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.762] IUnknown:QueryInterface (in: This=0x588b4e8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588b4ec) returned 0x0
	[0190.762] IMarshal:GetUnmarshalClass (in: This=0x588b4ec, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.762] IUnknown:Release (This=0x588b4ec) returned 0x3
	[0190.762] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.762] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.762] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.762] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.762] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.762] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.763] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e5d0) returned 0x0
	[0190.763] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.763] WbemDefPath:IUnknown:AddRef (This=0x588e5d0) returned 0x3
	[0190.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e5d0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e5d0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e5d0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd3588) returned 0x0
	[0190.763] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd3588, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.763] WbemDefPath:IUnknown:Release (This=0x5dd3588) returned 0x3
	[0190.763] WbemDefPath:IUnknown:Release (This=0x588e5d0) returned 0x2
	[0190.763] WbemDefPath:IUnknown:Release (This=0x588e5d0) returned 0x1
	[0190.763] WbemDefPath:IUnknown:Release (This=0x588e5d0) returned 0x2
	[0190.763] WbemDefPath:IWbemPath:SetText (This=0x588e5d0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4404\"") returned 0x0
	[0190.763] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.763] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.763] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.763] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.763] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.763] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.764] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.764] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588ab58, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.765] IUnknown:AddRef (This=0x588ab58) returned 0x3
	[0190.765] IUnknown:QueryInterface (in: This=0x588ab58, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.765] IUnknown:QueryInterface (in: This=0x588ab58, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.765] IUnknown:QueryInterface (in: This=0x588ab58, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588ab5c) returned 0x0
	[0190.765] IMarshal:GetUnmarshalClass (in: This=0x588ab5c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.765] IUnknown:Release (This=0x588ab5c) returned 0x3
	[0190.765] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.765] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.765] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.766] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.766] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.766] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.766] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.766] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e330) returned 0x0
	[0190.766] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.767] WbemDefPath:IUnknown:AddRef (This=0x588e330) returned 0x3
	[0190.767] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e330, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.767] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e330, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.767] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e330, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd3600) returned 0x0
	[0190.767] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd3600, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.767] WbemDefPath:IUnknown:Release (This=0x5dd3600) returned 0x3
	[0190.767] WbemDefPath:IUnknown:Release (This=0x588e330) returned 0x2
	[0190.767] WbemDefPath:IUnknown:Release (This=0x588e330) returned 0x1
	[0190.767] WbemDefPath:IUnknown:Release (This=0x588e330) returned 0x2
	[0190.767] WbemDefPath:IWbemPath:SetText (This=0x588e330, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4424\"") returned 0x0
	[0190.767] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.767] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.767] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.767] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.767] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.767] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.767] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.767] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588acf0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.768] IUnknown:AddRef (This=0x588acf0) returned 0x3
	[0190.768] IUnknown:QueryInterface (in: This=0x588acf0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.768] IUnknown:QueryInterface (in: This=0x588acf0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.768] IUnknown:QueryInterface (in: This=0x588acf0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588acf4) returned 0x0
	[0190.768] IMarshal:GetUnmarshalClass (in: This=0x588acf4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.768] IUnknown:Release (This=0x588acf4) returned 0x3
	[0190.768] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.768] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.768] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.768] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.769] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.769] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.769] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588dca0) returned 0x0
	[0190.769] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.769] WbemDefPath:IUnknown:AddRef (This=0x588dca0) returned 0x3
	[0190.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dca0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dca0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dca0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd3930) returned 0x0
	[0190.769] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd3930, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.769] WbemDefPath:IUnknown:Release (This=0x5dd3930) returned 0x3
	[0190.770] WbemDefPath:IUnknown:Release (This=0x588dca0) returned 0x2
	[0190.770] WbemDefPath:IUnknown:Release (This=0x588dca0) returned 0x1
	[0190.770] WbemDefPath:IUnknown:Release (This=0x588dca0) returned 0x2
	[0190.770] WbemDefPath:IWbemPath:SetText (This=0x588dca0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4432\"") returned 0x0
	[0190.770] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.770] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.770] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.770] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.770] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.770] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.770] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.770] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x588b680, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.771] IUnknown:AddRef (This=0x588b680) returned 0x3
	[0190.771] IUnknown:QueryInterface (in: This=0x588b680, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.771] IUnknown:QueryInterface (in: This=0x588b680, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.771] IUnknown:QueryInterface (in: This=0x588b680, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x588b684) returned 0x0
	[0190.771] IMarshal:GetUnmarshalClass (in: This=0x588b684, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.771] IUnknown:Release (This=0x588b684) returned 0x3
	[0190.771] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.771] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.771] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.771] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.771] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.772] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.772] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.772] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588d840) returned 0x0
	[0190.772] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.772] WbemDefPath:IUnknown:AddRef (This=0x588d840) returned 0x3
	[0190.772] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d840, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.772] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d840, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.772] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d840, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd39c0) returned 0x0
	[0190.772] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd39c0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.772] WbemDefPath:IUnknown:Release (This=0x5dd39c0) returned 0x3
	[0190.772] WbemDefPath:IUnknown:Release (This=0x588d840) returned 0x2
	[0190.772] WbemDefPath:IUnknown:Release (This=0x588d840) returned 0x1
	[0190.772] WbemDefPath:IUnknown:Release (This=0x588d840) returned 0x2
	[0190.772] WbemDefPath:IWbemPath:SetText (This=0x588d840, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4444\"") returned 0x0
	[0190.772] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.772] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.772] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.772] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.772] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.772] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.773] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.773] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5de0240, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.773] IUnknown:AddRef (This=0x5de0240) returned 0x3
	[0190.773] IUnknown:QueryInterface (in: This=0x5de0240, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.773] IUnknown:QueryInterface (in: This=0x5de0240, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.773] IUnknown:QueryInterface (in: This=0x5de0240, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5de0244) returned 0x0
	[0190.773] IMarshal:GetUnmarshalClass (in: This=0x5de0244, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.774] IUnknown:Release (This=0x5de0244) returned 0x3
	[0190.774] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.774] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.774] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.774] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.774] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.774] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.774] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.775] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588ded0) returned 0x0
	[0190.775] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.775] WbemDefPath:IUnknown:AddRef (This=0x588ded0) returned 0x3
	[0190.775] WbemDefPath:IUnknown:QueryInterface (in: This=0x588ded0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.775] WbemDefPath:IUnknown:QueryInterface (in: This=0x588ded0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.775] WbemDefPath:IUnknown:QueryInterface (in: This=0x588ded0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd3bd0) returned 0x0
	[0190.775] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd3bd0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.775] WbemDefPath:IUnknown:Release (This=0x5dd3bd0) returned 0x3
	[0190.775] WbemDefPath:IUnknown:Release (This=0x588ded0) returned 0x2
	[0190.775] WbemDefPath:IUnknown:Release (This=0x588ded0) returned 0x1
	[0190.775] WbemDefPath:IUnknown:Release (This=0x588ded0) returned 0x2
	[0190.775] WbemDefPath:IWbemPath:SetText (This=0x588ded0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4452\"") returned 0x0
	[0190.775] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.775] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.775] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.775] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.775] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.775] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.776] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.776] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5de0570, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.778] IUnknown:AddRef (This=0x5de0570) returned 0x3
	[0190.778] IUnknown:QueryInterface (in: This=0x5de0570, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.778] IUnknown:QueryInterface (in: This=0x5de0570, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.778] IUnknown:QueryInterface (in: This=0x5de0570, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5de0574) returned 0x0
	[0190.778] IMarshal:GetUnmarshalClass (in: This=0x5de0574, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.778] IUnknown:Release (This=0x5de0574) returned 0x3
	[0190.779] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.779] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.779] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.779] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.779] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.779] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.779] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.779] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e020) returned 0x0
	[0190.780] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.780] WbemDefPath:IUnknown:AddRef (This=0x588e020) returned 0x3
	[0190.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e020, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e020, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e020, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd3d98) returned 0x0
	[0190.780] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd3d98, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.780] WbemDefPath:IUnknown:Release (This=0x5dd3d98) returned 0x3
	[0190.780] WbemDefPath:IUnknown:Release (This=0x588e020) returned 0x2
	[0190.780] WbemDefPath:IUnknown:Release (This=0x588e020) returned 0x1
	[0190.780] WbemDefPath:IUnknown:Release (This=0x588e020) returned 0x2
	[0190.780] WbemDefPath:IWbemPath:SetText (This=0x588e020, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4532\"") returned 0x0
	[0190.780] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.780] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.780] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.780] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.780] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.780] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.780] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.780] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5ddfa48, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.782] IUnknown:AddRef (This=0x5ddfa48) returned 0x3
	[0190.782] IUnknown:QueryInterface (in: This=0x5ddfa48, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.782] IUnknown:QueryInterface (in: This=0x5ddfa48, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.782] IUnknown:QueryInterface (in: This=0x5ddfa48, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5ddfa4c) returned 0x0
	[0190.782] IMarshal:GetUnmarshalClass (in: This=0x5ddfa4c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.782] IUnknown:Release (This=0x5ddfa4c) returned 0x3
	[0190.782] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.783] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.783] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.783] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.783] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.783] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.785] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e1e0) returned 0x0
	[0190.785] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.785] WbemDefPath:IUnknown:AddRef (This=0x588e1e0) returned 0x3
	[0190.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e1e0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e1e0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e1e0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd3fa8) returned 0x0
	[0190.785] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd3fa8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.785] WbemDefPath:IUnknown:Release (This=0x5dd3fa8) returned 0x3
	[0190.785] WbemDefPath:IUnknown:Release (This=0x588e1e0) returned 0x2
	[0190.785] WbemDefPath:IUnknown:Release (This=0x588e1e0) returned 0x1
	[0190.785] WbemDefPath:IUnknown:Release (This=0x588e1e0) returned 0x2
	[0190.785] WbemDefPath:IWbemPath:SetText (This=0x588e1e0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4892\"") returned 0x0
	[0190.785] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.786] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.786] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.786] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.786] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.786] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.786] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.786] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5ddfbe0, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.787] IUnknown:AddRef (This=0x5ddfbe0) returned 0x3
	[0190.787] IUnknown:QueryInterface (in: This=0x5ddfbe0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.787] IUnknown:QueryInterface (in: This=0x5ddfbe0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.787] IUnknown:QueryInterface (in: This=0x5ddfbe0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5ddfbe4) returned 0x0
	[0190.787] IMarshal:GetUnmarshalClass (in: This=0x5ddfbe4, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.787] IUnknown:Release (This=0x5ddfbe4) returned 0x3
	[0190.787] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.787] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.787] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.787] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.787] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.788] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.788] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.788] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588dd80) returned 0x0
	[0190.788] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.788] WbemDefPath:IUnknown:AddRef (This=0x588dd80) returned 0x3
	[0190.788] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dd80, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.788] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dd80, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.788] WbemDefPath:IUnknown:QueryInterface (in: This=0x588dd80, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd4158) returned 0x0
	[0190.788] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd4158, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.788] WbemDefPath:IUnknown:Release (This=0x5dd4158) returned 0x3
	[0190.788] WbemDefPath:IUnknown:Release (This=0x588dd80) returned 0x2
	[0190.788] WbemDefPath:IUnknown:Release (This=0x588dd80) returned 0x1
	[0190.788] WbemDefPath:IUnknown:Release (This=0x588dd80) returned 0x2
	[0190.788] WbemDefPath:IWbemPath:SetText (This=0x588dd80, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3644\"") returned 0x0
	[0190.788] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.788] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.788] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.788] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.789] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.789] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.789] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.789] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5ddfd78, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.789] IUnknown:AddRef (This=0x5ddfd78) returned 0x3
	[0190.789] IUnknown:QueryInterface (in: This=0x5ddfd78, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.789] IUnknown:QueryInterface (in: This=0x5ddfd78, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.789] IUnknown:QueryInterface (in: This=0x5ddfd78, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5ddfd7c) returned 0x0
	[0190.790] IMarshal:GetUnmarshalClass (in: This=0x5ddfd7c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.790] IUnknown:Release (This=0x5ddfd7c) returned 0x3
	[0190.790] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.790] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.790] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.790] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.790] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.790] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.791] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e090) returned 0x0
	[0190.791] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.791] WbemDefPath:IUnknown:AddRef (This=0x588e090) returned 0x3
	[0190.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e090, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e090, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e090, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd4320) returned 0x0
	[0190.791] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd4320, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.791] WbemDefPath:IUnknown:Release (This=0x5dd4320) returned 0x3
	[0190.791] WbemDefPath:IUnknown:Release (This=0x588e090) returned 0x2
	[0190.791] WbemDefPath:IUnknown:Release (This=0x588e090) returned 0x1
	[0190.791] WbemDefPath:IUnknown:Release (This=0x588e090) returned 0x2
	[0190.791] WbemDefPath:IWbemPath:SetText (This=0x588e090, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4576\"") returned 0x0
	[0190.791] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.791] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.791] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.791] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.792] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.792] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.792] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.792] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5de0d68, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.792] IUnknown:AddRef (This=0x5de0d68) returned 0x3
	[0190.792] IUnknown:QueryInterface (in: This=0x5de0d68, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.792] IUnknown:QueryInterface (in: This=0x5de0d68, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.792] IUnknown:QueryInterface (in: This=0x5de0d68, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5de0d6c) returned 0x0
	[0190.793] IMarshal:GetUnmarshalClass (in: This=0x5de0d6c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.793] IUnknown:Release (This=0x5de0d6c) returned 0x3
	[0190.793] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.793] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.793] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.793] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.793] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.794] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.794] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.794] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e100) returned 0x0
	[0190.794] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.794] WbemDefPath:IUnknown:AddRef (This=0x588e100) returned 0x3
	[0190.794] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e100, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.794] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e100, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.794] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e100, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd4458) returned 0x0
	[0190.794] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd4458, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.794] WbemDefPath:IUnknown:Release (This=0x5dd4458) returned 0x3
	[0190.794] WbemDefPath:IUnknown:Release (This=0x588e100) returned 0x2
	[0190.794] WbemDefPath:IUnknown:Release (This=0x588e100) returned 0x1
	[0190.794] WbemDefPath:IUnknown:Release (This=0x588e100) returned 0x2
	[0190.794] WbemDefPath:IWbemPath:SetText (This=0x588e100, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2152\"") returned 0x0
	[0190.794] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.794] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.794] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.794] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.794] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.795] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.795] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.795] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5ddff10, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.795] IUnknown:AddRef (This=0x5ddff10) returned 0x3
	[0190.796] IUnknown:QueryInterface (in: This=0x5ddff10, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0190.796] IUnknown:QueryInterface (in: This=0x5ddff10, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002
	[0190.796] IUnknown:QueryInterface (in: This=0x5ddff10, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e150 | out: ppvObject=0x19e150*=0x5ddff14) returned 0x0
	[0190.796] IMarshal:GetUnmarshalClass (in: This=0x5ddff14, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.796] IUnknown:Release (This=0x5ddff14) returned 0x3
	[0190.796] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.796] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.796] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.796] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.796] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.796] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.797] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e250) returned 0x0
	[0190.797] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.797] WbemDefPath:IUnknown:AddRef (This=0x588e250) returned 0x3
	[0190.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e250, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0190.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e250, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e294 | out: ppvObject=0x19e294*=0x0) returned 0x80004002
	[0190.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e250, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a0 | out: ppvObject=0x19e2a0*=0x5dd4590) returned 0x0
	[0190.797] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd4590, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.797] WbemDefPath:IUnknown:Release (This=0x5dd4590) returned 0x3
	[0190.797] WbemDefPath:IUnknown:Release (This=0x588e250) returned 0x2
	[0190.797] WbemDefPath:IUnknown:Release (This=0x588e250) returned 0x1
	[0190.797] WbemDefPath:IUnknown:Release (This=0x588e250) returned 0x2
	[0190.797] WbemDefPath:IWbemPath:SetText (This=0x588e250, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3660\"") returned 0x0
	[0190.797] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f240 | out: puCount=0x19f240*=0x2) returned 0x0
	[0190.797] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0x0, pszText=0x0 | out: puBuffLength=0x19f23c*=0xf, pszText=0x0) returned 0x0
	[0190.797] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f23c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f23c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.797] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f20c | out: puCount=0x19f20c*=0x2) returned 0x0
	[0190.797] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0x0, pszText=0x0 | out: puBuffLength=0x19f208*=0xf, pszText=0x0) returned 0x0
	[0190.797] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f208*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f208*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0190.798] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.798] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x5de1560, puReturned=0x2a6632c*=0x1) returned 0x0
	[0190.799] IUnknown:AddRef (This=0x5de1560) returned 0x3
	[0190.799] IMarshal:GetUnmarshalClass (in: This=0x5de1564, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e158 | out: pCid=0x19e158*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0190.799] IUnknown:Release (This=0x5de1564) returned 0x3
	[0190.799] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.799] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f214 | out: ppv=0x19f214*=0x6d0ae4) returned 0x0
	[0190.799] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f20c | out: pAptType=0x19f20c*=1) returned 0x0
	[0190.799] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f210 | out: ppvObject=0x19f210*=0x0) returned 0x80004002
	[0190.800] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.800] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb80 | out: ppv=0x19eb80*=0x57a2ea8) returned 0x0
	[0190.800] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2ea8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed98 | out: ppvObject=0x19ed98*=0x0) returned 0x80004002
	[0190.800] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2ea8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edac | out: ppvObject=0x19edac*=0x588e2c0) returned 0x0
	[0190.800] WbemDefPath:IUnknown:Release (This=0x57a2ea8) returned 0x0
	[0190.800] WbemDefPath:IUnknown:AddRef (This=0x588e2c0) returned 0x3
	[0190.800] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd48f0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2a8 | out: pCid=0x19e2a8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.800] WbemDefPath:IUnknown:Release (This=0x5dd48f0) returned 0x3
	[0190.801] CoTaskMemAlloc (cb=0x4) returned 0x57a2ea8
	[0190.801] IEnumWbemClassObject:Next (in: This=0x78ae20, lTimeout=-1, uCount=0x1, apObjects=0x57a2ea8, puReturned=0x2a6632c | out: apObjects=0x57a2ea8*=0x0, puReturned=0x2a6632c*=0x0) returned 0x1
	[0190.801] CoTaskMemFree (pv=0x57a2ea8) 
	[0190.801] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x1
	[0190.801] IUnknown:Release (This=0x78ae20) returned 0x0
	[0190.814] WbemLocator:IUnknown:Release (This=0x57b04f8) returned 0x1
	[0190.814] IUnknown:Release (This=0x78ab00) returned 0x0
	[0190.824] CoTaskMemAlloc (cb=0x20c) returned 0x5836bc8
	[0190.824] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x5836bc8 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0190.824] CoTaskMemFree (pv=0x5836bc8) 
	[0190.825] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0190.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f294) returned 1
	[0190.825] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", nBufferLength=0x105, lpBuffer=0x19ed9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", lpFilePart=0x0) returned 0x3c
	[0190.825] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\", nBufferLength=0x105, lpBuffer=0x19ed70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\", lpFilePart=0x0) returned 0x3d
	[0190.826] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\*", lpFindFileData=0x19efbc | out: lpFindFileData=0x19efbc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0190.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f258) returned 1
	[0190.828] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", nBufferLength=0x105, lpBuffer=0x19ee1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", lpFilePart=0x0) returned 0x3c
	[0190.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2d0) returned 1
	[0190.828] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", nBufferLength=0x105, lpBuffer=0x19edd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", lpFilePart=0x0) returned 0x3c
	[0190.828] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\", nBufferLength=0x105, lpBuffer=0x19edac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\", lpFilePart=0x0) returned 0x3d
	[0190.828] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\*", lpFindFileData=0x19eff8 | out: lpFindFileData=0x19eff8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0190.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f294) returned 1
	[0190.863] GetUserNameW (in: lpBuffer=0x19f118, pcbBuffer=0x19f390 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x19f390) returned 1
	[0190.889] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2a4 | out: ppv=0x19f2a4*=0x6d0ae4) returned 0x0
	[0190.889] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f29c | out: pAptType=0x19f29c*=1) returned 0x0
	[0190.889] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2a0 | out: ppvObject=0x19f2a0*=0x0) returned 0x80004002
	[0190.889] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.890] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec10 | out: ppv=0x19ec10*=0x57a2e38) returned 0x0
	[0190.890] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2e38, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee28 | out: ppvObject=0x19ee28*=0x0) returned 0x80004002
	[0190.890] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2e38, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee3c | out: ppvObject=0x19ee3c*=0x588e3a0) returned 0x0
	[0190.890] WbemDefPath:IUnknown:Release (This=0x57a2e38) returned 0x0
	[0190.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e3a0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea5c | out: ppvObject=0x19ea5c*=0x588e3a0) returned 0x0
	[0190.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e3a0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea18 | out: ppvObject=0x19ea18*=0x0) returned 0x80004002
	[0190.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e3a0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0190.891] WbemDefPath:IUnknown:AddRef (This=0x588e3a0) returned 0x3
	[0190.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e3a0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e374 | out: ppvObject=0x19e374*=0x0) returned 0x80004002
	[0190.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e3a0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e324 | out: ppvObject=0x19e324*=0x0) returned 0x80004002
	[0190.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e3a0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e330 | out: ppvObject=0x19e330*=0x5dd4980) returned 0x0
	[0190.891] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd4980, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e338 | out: pCid=0x19e338*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.891] WbemDefPath:IUnknown:Release (This=0x5dd4980) returned 0x3
	[0190.891] CoGetContextToken (in: pToken=0x19e390 | out: pToken=0x19e390) returned 0x0
	[0190.891] CoGetContextToken (in: pToken=0x19e798 | out: pToken=0x19e798) returned 0x0
	[0190.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e3a0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e828 | out: ppvObject=0x19e828*=0x0) returned 0x80004002
	[0190.891] WbemDefPath:IUnknown:Release (This=0x588e3a0) returned 0x2
	[0190.891] WbemDefPath:IUnknown:Release (This=0x588e3a0) returned 0x1
	[0190.891] CoGetContextToken (in: pToken=0x19f120 | out: pToken=0x19f120) returned 0x0
	[0190.891] CoGetContextToken (in: pToken=0x19f080 | out: pToken=0x19f080) returned 0x0
	[0190.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e3a0, riid=0x19f150*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f14c | out: ppvObject=0x19f14c*=0x588e3a0) returned 0x0
	[0190.891] WbemDefPath:IUnknown:AddRef (This=0x588e3a0) returned 0x3
	[0190.891] WbemDefPath:IUnknown:Release (This=0x588e3a0) returned 0x2
	[0190.891] WbemDefPath:IWbemPath:SetText (This=0x588e3a0, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0190.891] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x588e3a0, puCount=0x19f2cc | out: puCount=0x19f2cc*=0x2) returned 0x0
	[0190.891] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f2c8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2c8*=0xf, pszText=0x0) returned 0x0
	[0190.892] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f2c8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2c8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0190.892] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x588e3a0, puCount=0x19f2b8 | out: puCount=0x19f2b8*=0x2) returned 0x0
	[0190.892] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f2b4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b4*=0xf, pszText=0x0) returned 0x0
	[0190.892] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f2b4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0190.892] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f24c | out: ppv=0x19f24c*=0x6d0ae4) returned 0x0
	[0190.892] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f244 | out: pAptType=0x19f244*=1) returned 0x0
	[0190.892] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f248 | out: ppvObject=0x19f248*=0x0) returned 0x80004002
	[0190.892] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0190.892] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee68 | out: ppv=0x19ee68*=0x5dd49f8) returned 0x0
	[0190.893] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd49f8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f080 | out: ppvObject=0x19f080*=0x0) returned 0x80004002
	[0190.893] WbemLocator:IClassFactory:CreateInstance (in: This=0x5dd49f8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f094 | out: ppvObject=0x19f094*=0x57a2dd8) returned 0x0
	[0190.893] WbemLocator:IUnknown:Release (This=0x5dd49f8) returned 0x0
	[0190.893] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecb4 | out: ppvObject=0x19ecb4*=0x57a2dd8) returned 0x0
	[0190.893] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec70 | out: ppvObject=0x19ec70*=0x0) returned 0x80004002
	[0190.893] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e864 | out: ppvObject=0x19e864*=0x0) returned 0x80004002
	[0190.893] WbemLocator:IUnknown:AddRef (This=0x57a2dd8) returned 0x3
	[0190.893] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5cc | out: ppvObject=0x19e5cc*=0x0) returned 0x80004002
	[0190.893] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0190.893] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e588 | out: ppvObject=0x19e588*=0x0) returned 0x80004002
	[0190.893] CoGetContextToken (in: pToken=0x19e5e8 | out: pToken=0x19e5e8) returned 0x0
	[0190.893] CoGetContextToken (in: pToken=0x19e9f0 | out: pToken=0x19e9f0) returned 0x0
	[0190.893] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea80 | out: ppvObject=0x19ea80*=0x0) returned 0x80004002
	[0190.893] WbemLocator:IUnknown:Release (This=0x57a2dd8) returned 0x2
	[0190.893] WbemLocator:IUnknown:Release (This=0x57a2dd8) returned 0x1
	[0190.893] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0190.893] CoGetContextToken (in: pToken=0x19efc0 | out: pToken=0x19efc0) returned 0x0
	[0190.894] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2dd8, riid=0x19f090*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f08c | out: ppvObject=0x19f08c*=0x57a2dd8) returned 0x0
	[0190.894] WbemLocator:IUnknown:AddRef (This=0x57a2dd8) returned 0x3
	[0190.894] WbemLocator:IUnknown:Release (This=0x57a2dd8) returned 0x2
	[0190.894] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x588e3a0, puCount=0x19f228 | out: puCount=0x19f228*=0x2) returned 0x0
	[0190.894] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=8, puBuffLength=0x19f224*=0x0, pszText=0x0 | out: puBuffLength=0x19f224*=0xf, pszText=0x0) returned 0x0
	[0190.894] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=8, puBuffLength=0x19f224*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f224*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0190.894] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f100 | out: ppv=0x19f100*=0x57a2de8) returned 0x0
	[0190.894] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2de8, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f194 | out: ppNamespace=0x19f194*=0x5dd8608) returned 0x0
	[0190.953] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8608, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f030 | out: ppvObject=0x19f030*=0x57b19d4) returned 0x0
	[0190.953] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b19d4, pProxy=0x5dd8608, pAuthnSvc=0x19f080, pAuthzSvc=0x19f07c, pServerPrincName=0x19f074, pAuthnLevel=0x19f078, pImpLevel=0x19f068, pAuthInfo=0x19f06c, pCapabilites=0x19f070 | out: pAuthnSvc=0x19f080*=0xa, pAuthzSvc=0x19f07c*=0x0, pServerPrincName=0x19f074, pAuthnLevel=0x19f078*=0x6, pImpLevel=0x19f068*=0x2, pAuthInfo=0x19f06c, pCapabilites=0x19f070*=0x1) returned 0x0
	[0190.953] WbemLocator:IUnknown:Release (This=0x57b19d4) returned 0x1
	[0190.953] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8608, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f024 | out: ppvObject=0x19f024*=0x57b19f8) returned 0x0
	[0190.954] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8608, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f020 | out: ppvObject=0x19f020*=0x57b19d4) returned 0x0
	[0190.954] WbemLocator:IClientSecurity:SetBlanket (This=0x57b19d4, pProxy=0x5dd8608, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0190.954] WbemLocator:IUnknown:Release (This=0x57b19d4) returned 0x2
	[0190.954] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x1
	[0190.954] CoTaskMemFree (pv=0x57b7fc0) 
	[0190.954] WbemLocator:IUnknown:Release (This=0x57a2de8) returned 0x0
	[0190.954] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8608, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec20 | out: ppvObject=0x19ec20*=0x57b19f8) returned 0x0
	[0190.954] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebdc | out: ppvObject=0x19ebdc*=0x0) returned 0x80004002
	[0190.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9fc | out: ppvObject=0x19e9fc*=0x0) returned 0x80004002
	[0190.955] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8608, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7d4 | out: ppvObject=0x19e7d4*=0x0) returned 0x80004002
	[0190.955] WbemLocator:IUnknown:AddRef (This=0x57b19f8) returned 0x3
	[0190.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e53c | out: ppvObject=0x19e53c*=0x0) returned 0x80004002
	[0190.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4ec | out: ppvObject=0x19e4ec*=0x0) returned 0x80004002
	[0190.955] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4f8 | out: ppvObject=0x19e4f8*=0x57b1954) returned 0x0
	[0190.955] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1954, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e500 | out: pCid=0x19e500*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0190.955] WbemLocator:IUnknown:Release (This=0x57b1954) returned 0x3
	[0190.955] CoGetContextToken (in: pToken=0x19e558 | out: pToken=0x19e558) returned 0x0
	[0190.956] CoGetContextToken (in: pToken=0x19e960 | out: pToken=0x19e960) returned 0x0
	[0190.956] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9f0 | out: ppvObject=0x19e9f0*=0x57b19dc) returned 0x0
	[0190.956] WbemLocator:IRpcOptions:Query (in: This=0x57b19dc, pPrx=0x57b19f8, dwProperty=2, pdwValue=0x19ea18 | out: pdwValue=0x19ea18) returned 0x80004002
	[0190.956] WbemLocator:IUnknown:Release (This=0x57b19dc) returned 0x3
	[0190.956] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x2
	[0190.956] CoGetContextToken (in: pToken=0x19ef30 | out: pToken=0x19ef30) returned 0x0
	[0190.956] CoGetContextToken (in: pToken=0x19ee90 | out: pToken=0x19ee90) returned 0x0
	[0190.956] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x19ef60*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef5c | out: ppvObject=0x19ef5c*=0x5dd8608) returned 0x0
	[0190.956] WbemLocator:IUnknown:AddRef (This=0x5dd8608) returned 0x4
	[0190.956] WbemLocator:IUnknown:Release (This=0x5dd8608) returned 0x3
	[0190.956] WbemLocator:IUnknown:Release (This=0x5dd8608) returned 0x2
	[0190.956] SysStringLen (param_1=0x0) returned 0x0
	[0190.956] CoGetContextToken (in: pToken=0x19ef28 | out: pToken=0x19ef28) returned 0x0
	[0190.956] WbemLocator:IUnknown:AddRef (This=0x57b19f8) returned 0x3
	[0190.956] WbemLocator:IUnknown:QueryInterface (in: This=0x57b19f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edbc | out: ppvObject=0x19edbc*=0x57b19f8) returned 0x0
	[0190.956] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x3
	[0190.956] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x2
	[0190.956] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0190.956] WbemLocator:IUnknown:AddRef (This=0x5dd8608) returned 0x3
	[0190.956] IWbemServices:ExecQuery (in: This=0x5dd8608, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x19f230 | out: ppEnum=0x19f230*=0x78afb0) returned 0x0
	[0190.959] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f088 | out: ppvObject=0x19f088*=0x78afb4) returned 0x0
	[0190.959] IClientSecurity:QueryBlanket (in: This=0x78afb4, pProxy=0x78afb0, pAuthnSvc=0x19f0d8, pAuthzSvc=0x19f0d4, pServerPrincName=0x19f0cc, pAuthnLevel=0x19f0d0, pImpLevel=0x19f0c0, pAuthInfo=0x19f0c4, pCapabilites=0x19f0c8 | out: pAuthnSvc=0x19f0d8*=0xa, pAuthzSvc=0x19f0d4*=0x0, pServerPrincName=0x19f0cc, pAuthnLevel=0x19f0d0*=0x6, pImpLevel=0x19f0c0*=0x2, pAuthInfo=0x19f0c4, pCapabilites=0x19f0c8*=0x1) returned 0x0
	[0190.959] IUnknown:Release (This=0x78afb4) returned 0x1
	[0190.959] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f07c | out: ppvObject=0x19f07c*=0x57b0cf8) returned 0x0
	[0190.959] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f078 | out: ppvObject=0x19f078*=0x78afb4) returned 0x0
	[0190.959] IClientSecurity:SetBlanket (This=0x78afb4, pProxy=0x78afb0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0190.989] IUnknown:Release (This=0x78afb4) returned 0x2
	[0190.989] WbemLocator:IUnknown:Release (This=0x57b0cf8) returned 0x1
	[0190.989] CoTaskMemFree (pv=0x57b8110) 
	[0190.990] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec74 | out: ppvObject=0x19ec74*=0x57b0cf8) returned 0x0
	[0190.990] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0cf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec30 | out: ppvObject=0x19ec30*=0x0) returned 0x80004002
	[0191.031] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0cf8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea4c | out: ppvObject=0x19ea4c*=0x0) returned 0x80004002
	[0191.031] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e824 | out: ppvObject=0x19e824*=0x0) returned 0x80004002
	[0191.033] WbemLocator:IUnknown:AddRef (This=0x57b0cf8) returned 0x3
	[0191.033] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0cf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e58c | out: ppvObject=0x19e58c*=0x0) returned 0x80004002
	[0191.033] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0cf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e53c | out: ppvObject=0x19e53c*=0x0) returned 0x80004002
	[0191.033] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0cf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e548 | out: ppvObject=0x19e548*=0x57b0c54) returned 0x0
	[0191.033] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0c54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e550 | out: pCid=0x19e550*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.033] WbemLocator:IUnknown:Release (This=0x57b0c54) returned 0x3
	[0191.033] CoGetContextToken (in: pToken=0x19e5a8 | out: pToken=0x19e5a8) returned 0x0
	[0191.033] CoGetContextToken (in: pToken=0x19e9b0 | out: pToken=0x19e9b0) returned 0x0
	[0191.033] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0cf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea40 | out: ppvObject=0x19ea40*=0x57b0cdc) returned 0x0
	[0191.033] WbemLocator:IRpcOptions:Query (in: This=0x57b0cdc, pPrx=0x57b0cf8, dwProperty=2, pdwValue=0x19ea68 | out: pdwValue=0x19ea68) returned 0x80004002
	[0191.033] WbemLocator:IUnknown:Release (This=0x57b0cdc) returned 0x3
	[0191.033] WbemLocator:IUnknown:Release (This=0x57b0cf8) returned 0x2
	[0191.033] CoGetContextToken (in: pToken=0x19ef88 | out: pToken=0x19ef88) returned 0x0
	[0191.034] CoGetContextToken (in: pToken=0x19eee8 | out: pToken=0x19eee8) returned 0x0
	[0191.034] WbemLocator:IUnknown:QueryInterface (in: This=0x57b0cf8, riid=0x19efb8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efb4 | out: ppvObject=0x19efb4*=0x78afb0) returned 0x0
	[0191.034] IUnknown:AddRef (This=0x78afb0) returned 0x4
	[0191.034] IUnknown:Release (This=0x78afb0) returned 0x3
	[0191.034] IUnknown:Release (This=0x78afb0) returned 0x2
	[0191.034] WbemLocator:IUnknown:Release (This=0x5dd8608) returned 0x2
	[0191.034] SysStringLen (param_1=0x0) returned 0x0
	[0191.034] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x588e3a0, puCount=0x19f27c | out: puCount=0x19f27c*=0x2) returned 0x0
	[0191.034] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f278*=0x0, pszText=0x0 | out: puBuffLength=0x19f278*=0xf, pszText=0x0) returned 0x0
	[0191.034] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f278*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f278*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0191.034] CoGetContextToken (in: pToken=0x19f0c8 | out: pToken=0x19f0c8) returned 0x0
	[0191.034] IUnknown:AddRef (This=0x78afb0) returned 0x3
	[0191.034] IEnumWbemClassObject:Clone (in: This=0x78afb0, ppEnum=0x19f288 | out: ppEnum=0x19f288*=0x78b208) returned 0x0
	[0191.036] IUnknown:QueryInterface (in: This=0x78b208, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f14c | out: ppvObject=0x19f14c*=0x78b20c) returned 0x0
	[0191.036] IClientSecurity:QueryBlanket (in: This=0x78b20c, pProxy=0x78b208, pAuthnSvc=0x19f19c, pAuthzSvc=0x19f198, pServerPrincName=0x19f190, pAuthnLevel=0x19f194, pImpLevel=0x19f184, pAuthInfo=0x19f188, pCapabilites=0x19f18c | out: pAuthnSvc=0x19f19c*=0xa, pAuthzSvc=0x19f198*=0x0, pServerPrincName=0x19f190, pAuthnLevel=0x19f194*=0x6, pImpLevel=0x19f184*=0x2, pAuthInfo=0x19f188, pCapabilites=0x19f18c*=0x1) returned 0x0
	[0191.037] IUnknown:Release (This=0x78b20c) returned 0x1
	[0191.037] IUnknown:QueryInterface (in: This=0x78b208, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f140 | out: ppvObject=0x19f140*=0x57b04f8) returned 0x0
	[0191.037] IUnknown:QueryInterface (in: This=0x78b208, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f13c | out: ppvObject=0x19f13c*=0x78b20c) returned 0x0
	[0191.037] IClientSecurity:SetBlanket (This=0x78b20c, pProxy=0x78b208, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0191.048] IUnknown:Release (This=0x78b20c) returned 0x2
	[0191.048] WbemLocator:IUnknown:Release (This=0x57b04f8) returned 0x1
	[0191.048] CoTaskMemFree (pv=0x57b7ea0) 
	[0191.048] IUnknown:QueryInterface (in: This=0x78b208, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed28 | out: ppvObject=0x19ed28*=0x57b04f8) returned 0x0
	[0191.048] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ece4 | out: ppvObject=0x19ece4*=0x0) returned 0x80004002
	[0191.049] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb04 | out: ppvObject=0x19eb04*=0x0) returned 0x80004002
	[0191.049] IUnknown:QueryInterface (in: This=0x78b208, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8dc | out: ppvObject=0x19e8dc*=0x0) returned 0x80004002
	[0191.049] WbemLocator:IUnknown:AddRef (This=0x57b04f8) returned 0x3
	[0191.049] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e644 | out: ppvObject=0x19e644*=0x0) returned 0x80004002
	[0191.050] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5f4 | out: ppvObject=0x19e5f4*=0x0) returned 0x80004002
	[0191.050] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x57b0454) returned 0x0
	[0191.050] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0454, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e608 | out: pCid=0x19e608*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.050] WbemLocator:IUnknown:Release (This=0x57b0454) returned 0x3
	[0191.050] CoGetContextToken (in: pToken=0x19e660 | out: pToken=0x19e660) returned 0x0
	[0191.050] CoGetContextToken (in: pToken=0x19ea68 | out: pToken=0x19ea68) returned 0x0
	[0191.050] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eaf8 | out: ppvObject=0x19eaf8*=0x57b04dc) returned 0x0
	[0191.050] WbemLocator:IRpcOptions:Query (in: This=0x57b04dc, pPrx=0x57b04f8, dwProperty=2, pdwValue=0x19eb20 | out: pdwValue=0x19eb20) returned 0x80004002
	[0191.050] WbemLocator:IUnknown:Release (This=0x57b04dc) returned 0x3
	[0191.050] WbemLocator:IUnknown:Release (This=0x57b04f8) returned 0x2
	[0191.050] CoGetContextToken (in: pToken=0x19f038 | out: pToken=0x19f038) returned 0x0
	[0191.050] CoGetContextToken (in: pToken=0x19ef98 | out: pToken=0x19ef98) returned 0x0
	[0191.050] WbemLocator:IUnknown:QueryInterface (in: This=0x57b04f8, riid=0x19f068*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f064 | out: ppvObject=0x19f064*=0x78b208) returned 0x0
	[0191.050] IUnknown:AddRef (This=0x78b208) returned 0x4
	[0191.050] IUnknown:Release (This=0x78b208) returned 0x3
	[0191.050] IUnknown:Release (This=0x78b208) returned 0x2
	[0191.050] IUnknown:Release (This=0x78afb0) returned 0x2
	[0191.050] SysStringLen (param_1=0x0) returned 0x0
	[0191.050] IEnumWbemClassObject:Reset (This=0x78b208) returned 0x0
	[0191.051] CoTaskMemAlloc (cb=0x4) returned 0x57a3028
	[0191.051] IEnumWbemClassObject:Next (in: This=0x78b208, lTimeout=-1, uCount=0x1, apObjects=0x57a3028, puReturned=0x2a95cd8 | out: apObjects=0x57a3028*=0x5de00a8, puReturned=0x2a95cd8*=0x1) returned 0x0
	[0191.063] IUnknown:QueryInterface (in: This=0x5de00a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e8e8 | out: ppvObject=0x19e8e8*=0x5de00a8) returned 0x0
	[0191.063] IUnknown:QueryInterface (in: This=0x5de00a8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8a4 | out: ppvObject=0x19e8a4*=0x0) returned 0x80004002
	[0191.063] IUnknown:QueryInterface (in: This=0x5de00a8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e6c4 | out: ppvObject=0x19e6c4*=0x0) returned 0x80004002
	[0191.063] IUnknown:QueryInterface (in: This=0x5de00a8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e49c | out: ppvObject=0x19e49c*=0x0) returned 0x80004002
	[0191.063] IUnknown:AddRef (This=0x5de00a8) returned 0x3
	[0191.063] IUnknown:QueryInterface (in: This=0x5de00a8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e204 | out: ppvObject=0x19e204*=0x0) returned 0x80004002
	[0191.063] IUnknown:QueryInterface (in: This=0x5de00a8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1b4 | out: ppvObject=0x19e1b4*=0x0) returned 0x80004002
	[0191.063] IUnknown:QueryInterface (in: This=0x5de00a8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e1c0 | out: ppvObject=0x19e1c0*=0x5de00ac) returned 0x0
	[0191.063] IMarshal:GetUnmarshalClass (in: This=0x5de00ac, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e1c8 | out: pCid=0x19e1c8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0191.063] IUnknown:Release (This=0x5de00ac) returned 0x3
	[0191.063] CoGetContextToken (in: pToken=0x19e220 | out: pToken=0x19e220) returned 0x0
	[0191.063] CoGetContextToken (in: pToken=0x19e628 | out: pToken=0x19e628) returned 0x0
	[0191.063] IUnknown:QueryInterface (in: This=0x5de00a8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6b8 | out: ppvObject=0x19e6b8*=0x0) returned 0x80004002
	[0191.063] IUnknown:Release (This=0x5de00a8) returned 0x2
	[0191.063] CoGetContextToken (in: pToken=0x19ebf8 | out: pToken=0x19ebf8) returned 0x0
	[0191.063] CoGetContextToken (in: pToken=0x19eb58 | out: pToken=0x19eb58) returned 0x0
	[0191.064] IUnknown:QueryInterface (in: This=0x5de00a8, riid=0x19ec28*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec24 | out: ppvObject=0x19ec24*=0x5de00a8) returned 0x0
	[0191.064] IUnknown:AddRef (This=0x5de00a8) returned 0x4
	[0191.064] IUnknown:Release (This=0x5de00a8) returned 0x3
	[0191.064] IUnknown:Release (This=0x5de00a8) returned 0x2
	[0191.064] CoTaskMemFree (pv=0x57a3028) 
	[0191.064] CoGetContextToken (in: pToken=0x19ef68 | out: pToken=0x19ef68) returned 0x0
	[0191.064] IUnknown:AddRef (This=0x5de00a8) returned 0x3
	[0191.064] IWbemClassObject:Get (in: This=0x5de00a8, wszName="__GENUS", lFlags=0, pVal=0x19f278*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2f8*=0, plFlavor=0x19f2f4*=0 | out: pVal=0x19f278*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f2f8*=3, plFlavor=0x19f2f4*=64) returned 0x0
	[0191.064] IWbemClassObject:Get (in: This=0x5de00a8, wszName="__PATH", lFlags=0, pVal=0x19f25c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2e0*=0, plFlavor=0x19f2dc*=0 | out: pVal=0x19f25c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x19f2e0*=8, plFlavor=0x19f2dc*=64) returned 0x0
	[0191.064] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0191.064] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0191.064] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f288 | out: ppv=0x19f288*=0x6d0ae4) returned 0x0
	[0191.064] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f280 | out: pAptType=0x19f280*=1) returned 0x0
	[0191.064] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f284 | out: ppvObject=0x19f284*=0x0) returned 0x80004002
	[0191.064] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0191.065] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebf0 | out: ppv=0x19ebf0*=0x57a3098) returned 0x0
	[0191.065] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a3098, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee08 | out: ppvObject=0x19ee08*=0x0) returned 0x80004002
	[0191.065] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a3098, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee1c | out: ppvObject=0x19ee1c*=0x588d990) returned 0x0
	[0191.065] WbemDefPath:IUnknown:Release (This=0x57a3098) returned 0x0
	[0191.065] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d990, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x588d990) returned 0x0
	[0191.065] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d990, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9f8 | out: ppvObject=0x19e9f8*=0x0) returned 0x80004002
	[0191.065] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d990, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5ec | out: ppvObject=0x19e5ec*=0x0) returned 0x80004002
	[0191.066] WbemDefPath:IUnknown:AddRef (This=0x588d990) returned 0x3
	[0191.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d990, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e354 | out: ppvObject=0x19e354*=0x0) returned 0x80004002
	[0191.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d990, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e304 | out: ppvObject=0x19e304*=0x0) returned 0x80004002
	[0191.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d990, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e310 | out: ppvObject=0x19e310*=0x5dd4b60) returned 0x0
	[0191.066] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd4b60, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e318 | out: pCid=0x19e318*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.066] WbemDefPath:IUnknown:Release (This=0x5dd4b60) returned 0x3
	[0191.066] CoGetContextToken (in: pToken=0x19e370 | out: pToken=0x19e370) returned 0x0
	[0191.066] CoGetContextToken (in: pToken=0x19e778 | out: pToken=0x19e778) returned 0x0
	[0191.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d990, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e808 | out: ppvObject=0x19e808*=0x0) returned 0x80004002
	[0191.066] WbemDefPath:IUnknown:Release (This=0x588d990) returned 0x2
	[0191.066] WbemDefPath:IUnknown:Release (This=0x588d990) returned 0x1
	[0191.066] CoGetContextToken (in: pToken=0x19f100 | out: pToken=0x19f100) returned 0x0
	[0191.066] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0191.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d990, riid=0x19f130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x588d990) returned 0x0
	[0191.066] WbemDefPath:IUnknown:AddRef (This=0x588d990) returned 0x3
	[0191.066] WbemDefPath:IUnknown:Release (This=0x588d990) returned 0x2
	[0191.066] WbemDefPath:IWbemPath:SetText (This=0x588d990, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0
	[0191.066] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x588e3a0, puCount=0x19f2b4 | out: puCount=0x19f2b4*=0x2) returned 0x0
	[0191.066] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f2b0*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b0*=0xf, pszText=0x0) returned 0x0
	[0191.067] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f2b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0191.067] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x588e3a0, puCount=0x19f280 | out: puCount=0x19f280*=0x2) returned 0x0
	[0191.067] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f27c*=0x0, pszText=0x0 | out: puBuffLength=0x19f27c*=0xf, pszText=0x0) returned 0x0
	[0191.067] WbemDefPath:IWbemPath:GetText (in: This=0x588e3a0, lFlags=4, puBuffLength=0x19f27c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f27c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0191.067] IWbemClassObject:Get (in: This=0x5de00a8, wszName="AdapterRAM", lFlags=0, pVal=0x19f27c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a96508*=0, plFlavor=0x2a9650c*=0 | out: pVal=0x19f27c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a96508*=19, plFlavor=0x2a9650c*=0) returned 0x0
	[0191.067] IWbemClassObject:Get (in: This=0x5de00a8, wszName="AdapterRAM", lFlags=0, pVal=0x19f284*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a96508*=19, plFlavor=0x2a9650c*=0 | out: pVal=0x19f284*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a96508*=19, plFlavor=0x2a9650c*=0) returned 0x0
	[0191.067] CoTaskMemAlloc (cb=0x4) returned 0x57a3068
	[0191.067] IEnumWbemClassObject:Next (in: This=0x78b208, lTimeout=-1, uCount=0x1, apObjects=0x57a3068, puReturned=0x2a95cd8 | out: apObjects=0x57a3068*=0x0, puReturned=0x2a95cd8*=0x0) returned 0x1
	[0191.068] CoTaskMemFree (pv=0x57a3068) 
	[0191.068] CoGetContextToken (in: pToken=0x19f1b0 | out: pToken=0x19f1b0) returned 0x0
	[0191.068] WbemLocator:IUnknown:Release (This=0x57b04f8) returned 0x1
	[0191.068] IUnknown:Release (This=0x78b208) returned 0x0
	[0191.070] CoGetContextToken (in: pToken=0x19f1b0 | out: pToken=0x19f1b0) returned 0x0
	[0191.070] WbemLocator:IUnknown:Release (This=0x57b0cf8) returned 0x1
	[0191.070] IUnknown:Release (This=0x78afb0) returned 0x0
	[0191.078] CoTaskMemAlloc (cb=0x804) returned 0x5dea718
	[0191.078] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x5dea718, nSize=0x19f378 | out: lpNameBuffer="XC64ZB\\RDhJ0CNFevzX", nSize=0x19f378) returned 0x1
	[0191.079] CoTaskMemFree (pv=0x5dea718) 
	[0191.079] GetUserNameW (in: lpBuffer=0x19f10c, pcbBuffer=0x19f384 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x19f384) returned 1
	[0191.090] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2f8 | out: puCount=0x19f2f8*=0x2) returned 0x0
	[0191.090] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2f4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2f4*=0xf, pszText=0x0) returned 0x0
	[0191.090] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2f4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2f4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.090] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f284 | out: ppv=0x19f284*=0x6d0ae4) returned 0x0
	[0191.091] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f27c | out: pAptType=0x19f27c*=1) returned 0x0
	[0191.091] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f280 | out: ppvObject=0x19f280*=0x0) returned 0x80004002
	[0191.091] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0191.091] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eea0 | out: ppv=0x19eea0*=0x5dd4a58) returned 0x0
	[0191.092] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd4a58, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f0b8 | out: ppvObject=0x19f0b8*=0x0) returned 0x80004002
	[0191.092] WbemLocator:IClassFactory:CreateInstance (in: This=0x5dd4a58, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0cc | out: ppvObject=0x19f0cc*=0x57a3008) returned 0x0
	[0191.092] WbemLocator:IUnknown:Release (This=0x5dd4a58) returned 0x0
	[0191.092] WbemLocator:IUnknown:QueryInterface (in: This=0x57a3008, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecec | out: ppvObject=0x19ecec*=0x57a3008) returned 0x0
	[0191.092] WbemLocator:IUnknown:QueryInterface (in: This=0x57a3008, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eca8 | out: ppvObject=0x19eca8*=0x0) returned 0x80004002
	[0191.092] WbemLocator:IUnknown:QueryInterface (in: This=0x57a3008, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e89c | out: ppvObject=0x19e89c*=0x0) returned 0x80004002
	[0191.092] WbemLocator:IUnknown:AddRef (This=0x57a3008) returned 0x3
	[0191.092] WbemLocator:IUnknown:QueryInterface (in: This=0x57a3008, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e604 | out: ppvObject=0x19e604*=0x0) returned 0x80004002
	[0191.092] WbemLocator:IUnknown:QueryInterface (in: This=0x57a3008, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5b4 | out: ppvObject=0x19e5b4*=0x0) returned 0x80004002
	[0191.092] WbemLocator:IUnknown:QueryInterface (in: This=0x57a3008, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5c0 | out: ppvObject=0x19e5c0*=0x0) returned 0x80004002
	[0191.092] CoGetContextToken (in: pToken=0x19e620 | out: pToken=0x19e620) returned 0x0
	[0191.092] CoGetContextToken (in: pToken=0x19ea28 | out: pToken=0x19ea28) returned 0x0
	[0191.092] WbemLocator:IUnknown:QueryInterface (in: This=0x57a3008, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eab8 | out: ppvObject=0x19eab8*=0x0) returned 0x80004002
	[0191.092] WbemLocator:IUnknown:Release (This=0x57a3008) returned 0x2
	[0191.092] WbemLocator:IUnknown:Release (This=0x57a3008) returned 0x1
	[0191.092] CoGetContextToken (in: pToken=0x19f098 | out: pToken=0x19f098) returned 0x0
	[0191.092] CoGetContextToken (in: pToken=0x19eff8 | out: pToken=0x19eff8) returned 0x0
	[0191.093] WbemLocator:IUnknown:QueryInterface (in: This=0x57a3008, riid=0x19f0c8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f0c4 | out: ppvObject=0x19f0c4*=0x57a3008) returned 0x0
	[0191.093] WbemLocator:IUnknown:AddRef (This=0x57a3008) returned 0x3
	[0191.093] WbemLocator:IUnknown:Release (This=0x57a3008) returned 0x2
	[0191.093] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f260 | out: puCount=0x19f260*=0x2) returned 0x0
	[0191.093] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f25c*=0x0, pszText=0x0 | out: puBuffLength=0x19f25c*=0xf, pszText=0x0) returned 0x0
	[0191.093] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f25c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f25c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.093] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f138 | out: ppv=0x19f138*=0x57a2f78) returned 0x0
	[0191.093] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a2f78, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1cc | out: ppNamespace=0x19f1cc*=0x5dd8748) returned 0x0
	[0191.156] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8748, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f068 | out: ppvObject=0x19f068*=0x57b06d4) returned 0x0
	[0191.156] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b06d4, pProxy=0x5dd8748, pAuthnSvc=0x19f0b8, pAuthzSvc=0x19f0b4, pServerPrincName=0x19f0ac, pAuthnLevel=0x19f0b0, pImpLevel=0x19f0a0, pAuthInfo=0x19f0a4, pCapabilites=0x19f0a8 | out: pAuthnSvc=0x19f0b8*=0xa, pAuthzSvc=0x19f0b4*=0x0, pServerPrincName=0x19f0ac, pAuthnLevel=0x19f0b0*=0x6, pImpLevel=0x19f0a0*=0x2, pAuthInfo=0x19f0a4, pCapabilites=0x19f0a8*=0x1) returned 0x0
	[0191.156] WbemLocator:IUnknown:Release (This=0x57b06d4) returned 0x1
	[0191.156] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8748, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f05c | out: ppvObject=0x19f05c*=0x57b06f8) returned 0x0
	[0191.156] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8748, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f058 | out: ppvObject=0x19f058*=0x57b06d4) returned 0x0
	[0191.157] WbemLocator:IClientSecurity:SetBlanket (This=0x57b06d4, pProxy=0x5dd8748, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0191.158] WbemLocator:IUnknown:Release (This=0x57b06d4) returned 0x2
	[0191.158] WbemLocator:IUnknown:Release (This=0x57b06f8) returned 0x1
	[0191.158] CoTaskMemFree (pv=0x57b80e0) 
	[0191.158] WbemLocator:IUnknown:Release (This=0x57a2f78) returned 0x0
	[0191.158] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8748, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec58 | out: ppvObject=0x19ec58*=0x57b06f8) returned 0x0
	[0191.158] WbemLocator:IUnknown:QueryInterface (in: This=0x57b06f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec14 | out: ppvObject=0x19ec14*=0x0) returned 0x80004002
	[0191.183] WbemLocator:IUnknown:QueryInterface (in: This=0x57b06f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0191.192] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8748, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e80c | out: ppvObject=0x19e80c*=0x0) returned 0x80004002
	[0191.200] WbemLocator:IUnknown:AddRef (This=0x57b06f8) returned 0x3
	[0191.200] WbemLocator:IUnknown:QueryInterface (in: This=0x57b06f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e574 | out: ppvObject=0x19e574*=0x0) returned 0x80004002
	[0191.200] WbemLocator:IUnknown:QueryInterface (in: This=0x57b06f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e524 | out: ppvObject=0x19e524*=0x0) returned 0x80004002
	[0191.200] WbemLocator:IUnknown:QueryInterface (in: This=0x57b06f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e530 | out: ppvObject=0x19e530*=0x57b0654) returned 0x0
	[0191.201] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b0654, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e538 | out: pCid=0x19e538*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.201] WbemLocator:IUnknown:Release (This=0x57b0654) returned 0x3
	[0191.201] CoGetContextToken (in: pToken=0x19e590 | out: pToken=0x19e590) returned 0x0
	[0191.201] CoGetContextToken (in: pToken=0x19e998 | out: pToken=0x19e998) returned 0x0
	[0191.201] WbemLocator:IUnknown:QueryInterface (in: This=0x57b06f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x57b06dc) returned 0x0
	[0191.201] WbemLocator:IRpcOptions:Query (in: This=0x57b06dc, pPrx=0x57b06f8, dwProperty=2, pdwValue=0x19ea50 | out: pdwValue=0x19ea50) returned 0x80004002
	[0191.201] WbemLocator:IUnknown:Release (This=0x57b06dc) returned 0x3
	[0191.201] WbemLocator:IUnknown:Release (This=0x57b06f8) returned 0x2
	[0191.201] CoGetContextToken (in: pToken=0x19ef68 | out: pToken=0x19ef68) returned 0x0
	[0191.201] CoGetContextToken (in: pToken=0x19eec8 | out: pToken=0x19eec8) returned 0x0
	[0191.201] WbemLocator:IUnknown:QueryInterface (in: This=0x57b06f8, riid=0x19ef98*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef94 | out: ppvObject=0x19ef94*=0x5dd8748) returned 0x0
	[0191.201] WbemLocator:IUnknown:AddRef (This=0x5dd8748) returned 0x4
	[0191.201] WbemLocator:IUnknown:Release (This=0x5dd8748) returned 0x3
	[0191.201] WbemLocator:IUnknown:Release (This=0x5dd8748) returned 0x2
	[0191.201] SysStringLen (param_1=0x0) returned 0x0
	[0191.202] CoGetContextToken (in: pToken=0x19ef60 | out: pToken=0x19ef60) returned 0x0
	[0191.202] WbemLocator:IUnknown:AddRef (This=0x57b06f8) returned 0x3
	[0191.202] WbemLocator:IUnknown:QueryInterface (in: This=0x57b06f8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edf4 | out: ppvObject=0x19edf4*=0x57b06f8) returned 0x0
	[0191.209] WbemLocator:IUnknown:Release (This=0x57b06f8) returned 0x3
	[0191.209] WbemLocator:IUnknown:Release (This=0x57b06f8) returned 0x2
	[0191.209] CoGetContextToken (in: pToken=0x19f058 | out: pToken=0x19f058) returned 0x0
	[0191.209] WbemLocator:IUnknown:AddRef (This=0x5dd8748) returned 0x3
	[0191.209] IWbemServices:ExecQuery (in: This=0x5dd8748, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_DiskDrive", lFlags=16, pCtx=0x0, ppEnum=0x19f268 | out: ppEnum=0x19f268*=0x78ae20) returned 0x0
	[0191.280] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0cc | out: ppvObject=0x19f0cc*=0x78ae24) returned 0x0
	[0191.280] IClientSecurity:QueryBlanket (in: This=0x78ae24, pProxy=0x78ae20, pAuthnSvc=0x19f11c, pAuthzSvc=0x19f118, pServerPrincName=0x19f110, pAuthnLevel=0x19f114, pImpLevel=0x19f104, pAuthInfo=0x19f108, pCapabilites=0x19f10c | out: pAuthnSvc=0x19f11c*=0xa, pAuthzSvc=0x19f118*=0x0, pServerPrincName=0x19f110, pAuthnLevel=0x19f114*=0x6, pImpLevel=0x19f104*=0x2, pAuthInfo=0x19f108, pCapabilites=0x19f10c*=0x1) returned 0x0
	[0191.280] IUnknown:Release (This=0x78ae24) returned 0x1
	[0191.280] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0c0 | out: ppvObject=0x19f0c0*=0x57b13f8) returned 0x0
	[0191.280] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x78ae24) returned 0x0
	[0191.280] IClientSecurity:SetBlanket (This=0x78ae24, pProxy=0x78ae20, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0191.298] IUnknown:Release (This=0x78ae24) returned 0x2
	[0191.298] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x1
	[0191.298] CoTaskMemFree (pv=0x57b7ba0) 
	[0191.298] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecb8 | out: ppvObject=0x19ecb8*=0x57b13f8) returned 0x0
	[0191.299] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec74 | out: ppvObject=0x19ec74*=0x0) returned 0x80004002
	[0191.299] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea94 | out: ppvObject=0x19ea94*=0x0) returned 0x80004002
	[0191.299] IUnknown:QueryInterface (in: This=0x78ae20, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e86c | out: ppvObject=0x19e86c*=0x0) returned 0x80004002
	[0191.300] WbemLocator:IUnknown:AddRef (This=0x57b13f8) returned 0x3
	[0191.300] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5d4 | out: ppvObject=0x19e5d4*=0x0) returned 0x80004002
	[0191.300] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e584 | out: ppvObject=0x19e584*=0x0) returned 0x80004002
	[0191.300] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e590 | out: ppvObject=0x19e590*=0x57b1354) returned 0x0
	[0191.300] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1354, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e598 | out: pCid=0x19e598*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.300] WbemLocator:IUnknown:Release (This=0x57b1354) returned 0x3
	[0191.300] CoGetContextToken (in: pToken=0x19e5f0 | out: pToken=0x19e5f0) returned 0x0
	[0191.300] CoGetContextToken (in: pToken=0x19e9f8 | out: pToken=0x19e9f8) returned 0x0
	[0191.300] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea88 | out: ppvObject=0x19ea88*=0x57b13dc) returned 0x0
	[0191.300] WbemLocator:IRpcOptions:Query (in: This=0x57b13dc, pPrx=0x57b13f8, dwProperty=2, pdwValue=0x19eab0 | out: pdwValue=0x19eab0) returned 0x80004002
	[0191.300] WbemLocator:IUnknown:Release (This=0x57b13dc) returned 0x3
	[0191.300] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x2
	[0191.300] CoGetContextToken (in: pToken=0x19efc8 | out: pToken=0x19efc8) returned 0x0
	[0191.300] CoGetContextToken (in: pToken=0x19ef28 | out: pToken=0x19ef28) returned 0x0
	[0191.300] WbemLocator:IUnknown:QueryInterface (in: This=0x57b13f8, riid=0x19eff8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19eff4 | out: ppvObject=0x19eff4*=0x78ae20) returned 0x0
	[0191.300] IUnknown:AddRef (This=0x78ae20) returned 0x4
	[0191.300] IUnknown:Release (This=0x78ae20) returned 0x3
	[0191.300] IUnknown:Release (This=0x78ae20) returned 0x2
	[0191.300] WbemLocator:IUnknown:Release (This=0x5dd8748) returned 0x2
	[0191.300] SysStringLen (param_1=0x0) returned 0x0
	[0191.301] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2b4 | out: puCount=0x19f2b4*=0x2) returned 0x0
	[0191.301] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b0*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b0*=0xf, pszText=0x0) returned 0x0
	[0191.301] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.301] CoGetContextToken (in: pToken=0x19f100 | out: pToken=0x19f100) returned 0x0
	[0191.301] IUnknown:AddRef (This=0x78ae20) returned 0x3
	[0191.301] IEnumWbemClassObject:Clone (in: This=0x78ae20, ppEnum=0x19f2c0 | out: ppEnum=0x19f2c0*=0x78afb0) returned 0x0
	[0191.302] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f184 | out: ppvObject=0x19f184*=0x78afb4) returned 0x0
	[0191.302] IClientSecurity:QueryBlanket (in: This=0x78afb4, pProxy=0x78afb0, pAuthnSvc=0x19f1d4, pAuthzSvc=0x19f1d0, pServerPrincName=0x19f1c8, pAuthnLevel=0x19f1cc, pImpLevel=0x19f1bc, pAuthInfo=0x19f1c0, pCapabilites=0x19f1c4 | out: pAuthnSvc=0x19f1d4*=0xa, pAuthzSvc=0x19f1d0*=0x0, pServerPrincName=0x19f1c8, pAuthnLevel=0x19f1cc*=0x6, pImpLevel=0x19f1bc*=0x2, pAuthInfo=0x19f1c0, pCapabilites=0x19f1c4*=0x1) returned 0x0
	[0191.302] IUnknown:Release (This=0x78afb4) returned 0x1
	[0191.302] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f178 | out: ppvObject=0x19f178*=0x57b15f8) returned 0x0
	[0191.303] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f174 | out: ppvObject=0x19f174*=0x78afb4) returned 0x0
	[0191.303] IClientSecurity:SetBlanket (This=0x78afb4, pProxy=0x78afb0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0191.304] IUnknown:Release (This=0x78afb4) returned 0x2
	[0191.304] WbemLocator:IUnknown:Release (This=0x57b15f8) returned 0x1
	[0191.304] CoTaskMemFree (pv=0x57b80e0) 
	[0191.304] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed60 | out: ppvObject=0x19ed60*=0x57b15f8) returned 0x0
	[0191.304] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ed1c | out: ppvObject=0x19ed1c*=0x0) returned 0x80004002
	[0191.305] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb3c | out: ppvObject=0x19eb3c*=0x0) returned 0x80004002
	[0191.305] IUnknown:QueryInterface (in: This=0x78afb0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e914 | out: ppvObject=0x19e914*=0x0) returned 0x80004002
	[0191.305] WbemLocator:IUnknown:AddRef (This=0x57b15f8) returned 0x3
	[0191.305] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e67c | out: ppvObject=0x19e67c*=0x0) returned 0x80004002
	[0191.305] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0191.305] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e638 | out: ppvObject=0x19e638*=0x57b1554) returned 0x0
	[0191.306] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1554, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e640 | out: pCid=0x19e640*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.306] WbemLocator:IUnknown:Release (This=0x57b1554) returned 0x3
	[0191.306] CoGetContextToken (in: pToken=0x19e698 | out: pToken=0x19e698) returned 0x0
	[0191.306] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0191.306] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb30 | out: ppvObject=0x19eb30*=0x57b15dc) returned 0x0
	[0191.306] WbemLocator:IRpcOptions:Query (in: This=0x57b15dc, pPrx=0x57b15f8, dwProperty=2, pdwValue=0x19eb58 | out: pdwValue=0x19eb58) returned 0x80004002
	[0191.306] WbemLocator:IUnknown:Release (This=0x57b15dc) returned 0x3
	[0191.306] WbemLocator:IUnknown:Release (This=0x57b15f8) returned 0x2
	[0191.306] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0191.306] CoGetContextToken (in: pToken=0x19efd0 | out: pToken=0x19efd0) returned 0x0
	[0191.306] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x19f0a0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x78afb0) returned 0x0
	[0191.309] IUnknown:AddRef (This=0x78afb0) returned 0x4
	[0191.309] IUnknown:Release (This=0x78afb0) returned 0x3
	[0191.309] IUnknown:Release (This=0x78afb0) returned 0x2
	[0191.309] IUnknown:Release (This=0x78ae20) returned 0x2
	[0191.309] SysStringLen (param_1=0x0) returned 0x0
	[0191.309] IEnumWbemClassObject:Reset (This=0x78afb0) returned 0x0
	[0191.309] CoTaskMemAlloc (cb=0x4) returned 0x57a2fe8
	[0191.309] IEnumWbemClassObject:Next (in: This=0x78afb0, lTimeout=-1, uCount=0x1, apObjects=0x57a2fe8, puReturned=0x2a98a4c | out: apObjects=0x57a2fe8*=0x5de0708, puReturned=0x2a98a4c*=0x1) returned 0x0
	[0191.312] IUnknown:QueryInterface (in: This=0x5de0708, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e920 | out: ppvObject=0x19e920*=0x5de0708) returned 0x0
	[0191.313] IUnknown:QueryInterface (in: This=0x5de0708, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8dc | out: ppvObject=0x19e8dc*=0x0) returned 0x80004002
	[0191.313] IUnknown:QueryInterface (in: This=0x5de0708, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e6fc | out: ppvObject=0x19e6fc*=0x0) returned 0x80004002
	[0191.313] IUnknown:QueryInterface (in: This=0x5de0708, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4d4 | out: ppvObject=0x19e4d4*=0x0) returned 0x80004002
	[0191.313] IUnknown:AddRef (This=0x5de0708) returned 0x3
	[0191.313] IUnknown:QueryInterface (in: This=0x5de0708, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e23c | out: ppvObject=0x19e23c*=0x0) returned 0x80004002
	[0191.313] IUnknown:QueryInterface (in: This=0x5de0708, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1ec | out: ppvObject=0x19e1ec*=0x0) returned 0x80004002
	[0191.313] IUnknown:QueryInterface (in: This=0x5de0708, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e1f8 | out: ppvObject=0x19e1f8*=0x5de070c) returned 0x0
	[0191.313] IMarshal:GetUnmarshalClass (in: This=0x5de070c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e200 | out: pCid=0x19e200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0191.313] IUnknown:Release (This=0x5de070c) returned 0x3
	[0191.313] CoGetContextToken (in: pToken=0x19e258 | out: pToken=0x19e258) returned 0x0
	[0191.313] CoGetContextToken (in: pToken=0x19e660 | out: pToken=0x19e660) returned 0x0
	[0191.313] IUnknown:QueryInterface (in: This=0x5de0708, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6f0 | out: ppvObject=0x19e6f0*=0x0) returned 0x80004002
	[0191.313] IUnknown:Release (This=0x5de0708) returned 0x2
	[0191.313] CoGetContextToken (in: pToken=0x19ec30 | out: pToken=0x19ec30) returned 0x0
	[0191.313] CoGetContextToken (in: pToken=0x19eb90 | out: pToken=0x19eb90) returned 0x0
	[0191.313] IUnknown:QueryInterface (in: This=0x5de0708, riid=0x19ec60*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec5c | out: ppvObject=0x19ec5c*=0x5de0708) returned 0x0
	[0191.313] IUnknown:AddRef (This=0x5de0708) returned 0x4
	[0191.313] IUnknown:Release (This=0x5de0708) returned 0x3
	[0191.313] IUnknown:Release (This=0x5de0708) returned 0x2
	[0191.313] CoTaskMemFree (pv=0x57a2fe8) 
	[0191.313] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0191.314] IUnknown:AddRef (This=0x5de0708) returned 0x3
	[0191.314] IWbemClassObject:Get (in: This=0x5de0708, wszName="__GENUS", lFlags=0, pVal=0x19f2b0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f330*=0, plFlavor=0x19f32c*=0 | out: pVal=0x19f2b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f330*=3, plFlavor=0x19f32c*=64) returned 0x0
	[0191.314] IWbemClassObject:Get (in: This=0x5de0708, wszName="__PATH", lFlags=0, pVal=0x19f294*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f318*=0, plFlavor=0x19f314*=0 | out: pVal=0x19f294*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_DiskDrive.DeviceID=\"\\\\\\\\.\\\\PHYSICALDRIVE0\"", varVal2=0x0), pType=0x19f318*=8, plFlavor=0x19f314*=64) returned 0x0
	[0191.314] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_DiskDrive.DeviceID=\"\\\\\\\\.\\\\PHYSICALDRIVE0\"") returned 0x88
	[0191.314] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_DiskDrive.DeviceID=\"\\\\\\\\.\\\\PHYSICALDRIVE0\"") returned 0x88
	[0191.314] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2c0 | out: ppv=0x19f2c0*=0x6d0ae4) returned 0x0
	[0191.314] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2b8 | out: pAptType=0x19f2b8*=1) returned 0x0
	[0191.314] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x0) returned 0x80004002
	[0191.314] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0191.315] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec28 | out: ppv=0x19ec28*=0x57a30b8) returned 0x0
	[0191.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a30b8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee40 | out: ppvObject=0x19ee40*=0x0) returned 0x80004002
	[0191.316] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a30b8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee54 | out: ppvObject=0x19ee54*=0x588e410) returned 0x0
	[0191.316] WbemDefPath:IUnknown:Release (This=0x57a30b8) returned 0x0
	[0191.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e410, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea74 | out: ppvObject=0x19ea74*=0x588e410) returned 0x0
	[0191.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e410, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea30 | out: ppvObject=0x19ea30*=0x0) returned 0x80004002
	[0191.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e410, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e624 | out: ppvObject=0x19e624*=0x0) returned 0x80004002
	[0191.316] WbemDefPath:IUnknown:AddRef (This=0x588e410) returned 0x3
	[0191.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e410, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e38c | out: ppvObject=0x19e38c*=0x0) returned 0x80004002
	[0191.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e410, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e33c | out: ppvObject=0x19e33c*=0x0) returned 0x80004002
	[0191.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e410, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e348 | out: ppvObject=0x19e348*=0x5dd4f98) returned 0x0
	[0191.316] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd4f98, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e350 | out: pCid=0x19e350*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.316] WbemDefPath:IUnknown:Release (This=0x5dd4f98) returned 0x3
	[0191.317] CoGetContextToken (in: pToken=0x19e3a8 | out: pToken=0x19e3a8) returned 0x0
	[0191.317] CoGetContextToken (in: pToken=0x19e7b0 | out: pToken=0x19e7b0) returned 0x0
	[0191.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e410, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e840 | out: ppvObject=0x19e840*=0x0) returned 0x80004002
	[0191.317] WbemDefPath:IUnknown:Release (This=0x588e410) returned 0x2
	[0191.317] WbemDefPath:IUnknown:Release (This=0x588e410) returned 0x1
	[0191.317] CoGetContextToken (in: pToken=0x19f138 | out: pToken=0x19f138) returned 0x0
	[0191.317] CoGetContextToken (in: pToken=0x19f098 | out: pToken=0x19f098) returned 0x0
	[0191.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x588e410, riid=0x19f168*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f164 | out: ppvObject=0x19f164*=0x588e410) returned 0x0
	[0191.317] WbemDefPath:IUnknown:AddRef (This=0x588e410) returned 0x3
	[0191.317] WbemDefPath:IUnknown:Release (This=0x588e410) returned 0x2
	[0191.317] WbemDefPath:IWbemPath:SetText (This=0x588e410, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_DiskDrive.DeviceID=\"\\\\\\\\.\\\\PHYSICALDRIVE0\"") returned 0x0
	[0191.317] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2ec | out: puCount=0x19f2ec*=0x2) returned 0x0
	[0191.317] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2e8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2e8*=0xf, pszText=0x0) returned 0x0
	[0191.317] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2e8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2e8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.318] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2b8 | out: puCount=0x19f2b8*=0x2) returned 0x0
	[0191.318] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b4*=0xf, pszText=0x0) returned 0x0
	[0191.318] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2b4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.318] IWbemClassObject:Get (in: This=0x5de0708, wszName="SerialNumber", lFlags=0, pVal=0x19f2b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a9927c*=0, plFlavor=0x2a99280*=0 | out: pVal=0x19f2b4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="IWVTNDZUOJ8XKN", varVal2=0x0), pType=0x2a9927c*=8, plFlavor=0x2a99280*=0) returned 0x0
	[0191.318] SysStringByteLen (bstr="IWVTNDZUOJ8XKN") returned 0x1c
	[0191.318] SysStringByteLen (bstr="IWVTNDZUOJ8XKN") returned 0x1c
	[0191.318] IWbemClassObject:Get (in: This=0x5de0708, wszName="SerialNumber", lFlags=0, pVal=0x19f2bc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a9927c*=8, plFlavor=0x2a99280*=0 | out: pVal=0x19f2bc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="IWVTNDZUOJ8XKN", varVal2=0x0), pType=0x2a9927c*=8, plFlavor=0x2a99280*=0) returned 0x0
	[0191.318] SysStringByteLen (bstr="IWVTNDZUOJ8XKN") returned 0x1c
	[0191.318] SysStringByteLen (bstr="IWVTNDZUOJ8XKN") returned 0x1c
	[0191.318] CoGetContextToken (in: pToken=0x19f1e8 | out: pToken=0x19f1e8) returned 0x0
	[0191.318] WbemLocator:IUnknown:Release (This=0x57b15f8) returned 0x1
	[0191.318] IUnknown:Release (This=0x78afb0) returned 0x0
	[0191.319] CoGetContextToken (in: pToken=0x19f1e8 | out: pToken=0x19f1e8) returned 0x0
	[0191.319] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x1
	[0191.319] IUnknown:Release (This=0x78ae20) returned 0x0
	[0191.339] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x19f354 | out: pfEnabled=0x19f354) returned 0x0
	[0191.429] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f114, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0191.429] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\discord\\Local Storage\\leveldb", lpDst=0x19f114, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb") returned 0x44
	[0191.429] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19ed84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43
	[0191.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f238) returned 1
	[0191.429] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19ed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43
	[0191.429] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", nBufferLength=0x105, lpBuffer=0x19ed14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", lpFilePart=0x0) returned 0x44
	[0191.430] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\*.log", lpFindFileData=0x19ef60 | out: lpFindFileData=0x19ef60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1fc) returned 1
	[0191.432] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19ed84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43
	[0191.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f238) returned 1
	[0191.432] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19ed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43
	[0191.432] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", nBufferLength=0x105, lpBuffer=0x19ed14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", lpFilePart=0x0) returned 0x44
	[0191.432] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\*.ldb", lpFindFileData=0x19ef60 | out: lpFindFileData=0x19ef60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1fc) returned 1
	[0191.459] GetKeyboardLayoutList (in: nBuff=0, lpList=0x0 | out: lpList=0x0) returned 1
	[0191.459] GetKeyboardLayoutList (in: nBuff=1, lpList=0x2a9c37c | out: lpList=0x2a9c37c) returned 1
	[0191.501] GetCurrentProcess () returned 0xffffffff
	[0191.501] GetCurrentThread () returned 0xfffffffe
	[0191.501] GetCurrentProcess () returned 0xffffffff
	[0191.502] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19f34c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19f34c*=0x284) returned 1
	[0191.502] GetCurrentThreadId () returned 0xe64
	[0191.503] OleInitialize (pvReserved=0x0) returned 0x80010106
	[0191.505] GetKeyboardLayout (idThread=0x0) returned 0x4090409
	[0191.509] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x74530000
	[0191.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="IsWow64Process", cchWideChar=14, lpMultiByteStr=0x19f2f8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IsWow64ProcessÃj\x1b͹; «´khö\x19", lpUsedDefaultChar=0x0) returned 14
	[0191.509] GetProcAddress (hModule=0x74530000, lpProcName="IsWow64Process") returned 0x74549f10
	[0191.509] GetCurrentProcess () returned 0xffffffff
	[0191.510] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19f358 | out: Wow64Process=0x19f358*=1) returned 1
	[0191.514] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2f4 | out: phkResult=0x19f2f4*=0x66c) returned 0x0
	[0191.514] RegQueryValueExW (in: hKey=0x66c, lpValueName="ProductName", lpReserved=0x0, lpType=0x19f314, lpData=0x0, lpcbData=0x19f310*=0x0 | out: lpType=0x19f314*=0x1, lpData=0x0, lpcbData=0x19f310*=0x1e) returned 0x0
	[0191.514] RegQueryValueExW (in: hKey=0x66c, lpValueName="ProductName", lpReserved=0x0, lpType=0x19f314, lpData=0x2a9cc04, lpcbData=0x19f310*=0x1e | out: lpType=0x19f314*=0x1, lpData="Windows 10 Pro", lpcbData=0x19f310*=0x1e) returned 0x0
	[0191.514] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2f4 | out: phkResult=0x19f2f4*=0x288) returned 0x0
	[0191.514] RegQueryValueExW (in: hKey=0x288, lpValueName="CSDVersion", lpReserved=0x0, lpType=0x19f314, lpData=0x0, lpcbData=0x19f310*=0x0 | out: lpType=0x19f314*=0x0, lpData=0x0, lpcbData=0x19f310*=0x0) returned 0x2
	[0191.566] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.566] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Battle.net", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net") returned 0x2f
	[0191.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.566] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net", lpFilePart=0x0) returned 0x2e
	[0191.566] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\", lpFilePart=0x0) returned 0x2f
	[0191.566] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.568] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.568] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chromium\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data") returned 0x37
	[0191.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.568] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data", lpFilePart=0x0) returned 0x36
	[0191.568] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", lpFilePart=0x0) returned 0x37
	[0191.568] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.569] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.569] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Google\\Chrome\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x3c
	[0191.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.570] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3b
	[0191.570] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0191.570] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.571] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.571] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Google(x86)\\Chrome\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data") returned 0x41
	[0191.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.571] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data", lpFilePart=0x0) returned 0x40
	[0191.571] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x41
	[0191.571] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.573] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.573] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Opera Software\\", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\") returned 0x36
	[0191.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.573] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", lpFilePart=0x0) returned 0x35
	[0191.573] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", lpFilePart=0x0) returned 0x35
	[0191.573] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.575] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.575] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data") returned 0x45
	[0191.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.575] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", lpFilePart=0x0) returned 0x44
	[0191.575] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", lpFilePart=0x0) returned 0x45
	[0191.576] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.577] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.577] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Iridium\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data") returned 0x36
	[0191.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.577] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data", lpFilePart=0x0) returned 0x35
	[0191.577] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", lpFilePart=0x0) returned 0x36
	[0191.577] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.578] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.578] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\7Star\\7Star\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data") returned 0x3a
	[0191.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.579] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data", lpFilePart=0x0) returned 0x39
	[0191.579] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", lpFilePart=0x0) returned 0x3a
	[0191.579] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.580] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.580] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CentBrowser\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data") returned 0x3a
	[0191.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.580] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data", lpFilePart=0x0) returned 0x39
	[0191.580] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", lpFilePart=0x0) returned 0x3a
	[0191.580] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.582] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.582] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chedot\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data") returned 0x35
	[0191.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.582] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data", lpFilePart=0x0) returned 0x34
	[0191.582] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", lpFilePart=0x0) returned 0x35
	[0191.582] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.583] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.584] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Vivaldi\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data") returned 0x36
	[0191.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.584] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data", lpFilePart=0x0) returned 0x35
	[0191.584] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", lpFilePart=0x0) returned 0x36
	[0191.584] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.585] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.585] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Kometa\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data") returned 0x35
	[0191.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.586] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data", lpFilePart=0x0) returned 0x34
	[0191.586] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", lpFilePart=0x0) returned 0x35
	[0191.586] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.587] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.587] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Elements Browser\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data") returned 0x3f
	[0191.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.587] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data", lpFilePart=0x0) returned 0x3e
	[0191.587] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", lpFilePart=0x0) returned 0x3f
	[0191.587] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.589] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.589] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Epic Privacy Browser\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data") returned 0x43
	[0191.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.589] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", lpFilePart=0x0) returned 0x42
	[0191.589] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\", lpFilePart=0x0) returned 0x43
	[0191.589] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.590] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.590] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\uCozMedia\\Uran\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data") returned 0x3d
	[0191.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.590] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data", lpFilePart=0x0) returned 0x3c
	[0191.590] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0191.591] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.592] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.592] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer") returned 0x58
	[0191.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.592] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", lpFilePart=0x0) returned 0x57
	[0191.593] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", lpFilePart=0x0) returned 0x58
	[0191.593] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.597] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.597] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data") returned 0x43
	[0191.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.597] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", lpFilePart=0x0) returned 0x42
	[0191.597] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", lpFilePart=0x0) returned 0x43
	[0191.597] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.598] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.599] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Coowon\\Coowon\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data") returned 0x3c
	[0191.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.599] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data", lpFilePart=0x0) returned 0x3b
	[0191.599] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0191.599] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.600] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.600] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\liebao\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data") returned 0x35
	[0191.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.600] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data", lpFilePart=0x0) returned 0x34
	[0191.600] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", lpFilePart=0x0) returned 0x35
	[0191.600] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.602] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.602] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\QIP Surf\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data") returned 0x37
	[0191.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.602] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data", lpFilePart=0x0) returned 0x36
	[0191.602] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", lpFilePart=0x0) returned 0x37
	[0191.602] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.604] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.604] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Orbitum\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data") returned 0x36
	[0191.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.604] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data", lpFilePart=0x0) returned 0x35
	[0191.605] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", lpFilePart=0x0) returned 0x36
	[0191.605] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.607] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.607] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Comodo\\Dragon\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data") returned 0x3c
	[0191.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.608] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data", lpFilePart=0x0) returned 0x3b
	[0191.608] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0191.608] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.609] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.609] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Amigo\\User\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data") returned 0x39
	[0191.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.609] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data", lpFilePart=0x0) returned 0x38
	[0191.609] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", lpFilePart=0x0) returned 0x39
	[0191.610] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.611] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.611] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Torch\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data") returned 0x34
	[0191.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.611] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data", lpFilePart=0x0) returned 0x33
	[0191.611] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", lpFilePart=0x0) returned 0x34
	[0191.611] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.613] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.613] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data") returned 0x43
	[0191.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.613] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", lpFilePart=0x0) returned 0x42
	[0191.613] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", lpFilePart=0x0) returned 0x43
	[0191.613] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.615] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.615] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Comodo\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data") returned 0x35
	[0191.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.615] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data", lpFilePart=0x0) returned 0x34
	[0191.615] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", lpFilePart=0x0) returned 0x35
	[0191.615] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.616] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.616] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\360Browser\\Browser\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data") returned 0x41
	[0191.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.617] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data", lpFilePart=0x0) returned 0x40
	[0191.617] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", lpFilePart=0x0) returned 0x41
	[0191.617] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.618] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.618] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Maxthon3\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data") returned 0x37
	[0191.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.618] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data", lpFilePart=0x0) returned 0x36
	[0191.618] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", lpFilePart=0x0) returned 0x37
	[0191.618] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.620] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.620] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\K-Melon\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data") returned 0x36
	[0191.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.620] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data", lpFilePart=0x0) returned 0x35
	[0191.620] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", lpFilePart=0x0) returned 0x36
	[0191.620] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.621] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.621] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Sputnik\\Sputnik\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data") returned 0x3e
	[0191.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.622] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data", lpFilePart=0x0) returned 0x3d
	[0191.622] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", lpFilePart=0x0) returned 0x3e
	[0191.622] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.623] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.624] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Nichrome\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data") returned 0x37
	[0191.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.624] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data", lpFilePart=0x0) returned 0x36
	[0191.624] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\", lpFilePart=0x0) returned 0x37
	[0191.624] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.625] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.625] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CocCoc\\Browser\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data") returned 0x3d
	[0191.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.625] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data", lpFilePart=0x0) returned 0x3c
	[0191.626] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0191.626] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.627] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.627] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Uran\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data") returned 0x33
	[0191.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.627] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data", lpFilePart=0x0) returned 0x32
	[0191.627] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\", lpFilePart=0x0) returned 0x33
	[0191.627] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.629] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.629] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chromodo\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data") returned 0x37
	[0191.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.629] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data", lpFilePart=0x0) returned 0x36
	[0191.629] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\", lpFilePart=0x0) returned 0x37
	[0191.629] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.630] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.630] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Mail.Ru\\Atom\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data") returned 0x3b
	[0191.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.631] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data", lpFilePart=0x0) returned 0x3a
	[0191.631] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\", lpFilePart=0x0) returned 0x3b
	[0191.631] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.633] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.634] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data") returned 0x4a
	[0191.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.634] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", lpFilePart=0x0) returned 0x49
	[0191.634] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\", lpFilePart=0x0) returned 0x4a
	[0191.635] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.636] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.636] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Microsoft\\Edge\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data") returned 0x3d
	[0191.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.636] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data", lpFilePart=0x0) returned 0x3c
	[0191.636] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0191.636] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.638] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.638] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience") returned 0x51
	[0191.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.638] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", lpFilePart=0x0) returned 0x50
	[0191.638] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\", lpFilePart=0x0) returned 0x51
	[0191.638] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.639] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.640] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Steam", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam") returned 0x2a
	[0191.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.640] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam", lpFilePart=0x0) returned 0x29
	[0191.640] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam\\", lpFilePart=0x0) returned 0x2a
	[0191.640] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.641] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.641] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CryptoTab Browser\\User Data", lpDst=0x19f180, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data") returned 0x40
	[0191.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0191.641] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data", lpFilePart=0x0) returned 0x3f
	[0191.641] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data\\", lpFilePart=0x0) returned 0x40
	[0191.641] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data\\*", lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e0) returned 1
	[0191.650] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.650] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Mozilla\\Firefox", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x36
	[0191.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f24c) returned 1
	[0191.650] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x35
	[0191.650] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x19ed28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x36
	[0191.650] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x19ef74 | out: lpFindFileData=0x19ef74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0191.652] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.652] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Waterfox", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox") returned 0x2f
	[0191.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f24c) returned 1
	[0191.652] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox", lpFilePart=0x0) returned 0x2e
	[0191.653] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox\\", nBufferLength=0x105, lpBuffer=0x19ed28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox\\", lpFilePart=0x0) returned 0x2f
	[0191.653] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox\\*", lpFindFileData=0x19ef74 | out: lpFindFileData=0x19ef74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0191.654] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.654] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\K-Meleon", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon") returned 0x2f
	[0191.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f24c) returned 1
	[0191.654] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon", lpFilePart=0x0) returned 0x2e
	[0191.655] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon\\", nBufferLength=0x105, lpBuffer=0x19ed28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon\\", lpFilePart=0x0) returned 0x2f
	[0191.655] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon\\*", lpFindFileData=0x19ef74 | out: lpFindFileData=0x19ef74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0191.656] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.656] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Thunderbird", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird") returned 0x32
	[0191.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f24c) returned 1
	[0191.656] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird", lpFilePart=0x0) returned 0x31
	[0191.656] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird\\", nBufferLength=0x105, lpBuffer=0x19ed28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird\\", lpFilePart=0x0) returned 0x32
	[0191.656] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird\\*", lpFindFileData=0x19ef74 | out: lpFindFileData=0x19ef74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0191.658] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.658] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Comodo\\IceDragon", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon") returned 0x37
	[0191.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f24c) returned 1
	[0191.658] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon", lpFilePart=0x0) returned 0x36
	[0191.658] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon\\", nBufferLength=0x105, lpBuffer=0x19ed28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon\\", lpFilePart=0x0) returned 0x37
	[0191.658] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon\\*", lpFindFileData=0x19ef74 | out: lpFindFileData=0x19ef74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0191.659] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.660] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\8pecxstudios\\Cyberfox", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox") returned 0x3c
	[0191.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f24c) returned 1
	[0191.660] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox", lpFilePart=0x0) returned 0x3b
	[0191.660] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox\\", nBufferLength=0x105, lpBuffer=0x19ed28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox\\", lpFilePart=0x0) returned 0x3c
	[0191.660] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox\\*", lpFindFileData=0x19ef74 | out: lpFindFileData=0x19ef74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0191.661] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.661] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw") returned 0x44
	[0191.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f24c) returned 1
	[0191.661] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw", lpFilePart=0x0) returned 0x43
	[0191.661] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw\\", nBufferLength=0x105, lpBuffer=0x19ed28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw\\", lpFilePart=0x0) returned 0x44
	[0191.661] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw\\*", lpFindFileData=0x19ef74 | out: lpFindFileData=0x19ef74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0191.663] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0191.664] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Moonchild Productions\\Pale Moon", lpDst=0x19f1b0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon") returned 0x46
	[0191.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f24c) returned 1
	[0191.664] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon", nBufferLength=0x105, lpBuffer=0x19ed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon", lpFilePart=0x0) returned 0x45
	[0191.664] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon\\", nBufferLength=0x105, lpBuffer=0x19ed28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon\\", lpFilePart=0x0) returned 0x46
	[0191.664] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon\\*", lpFindFileData=0x19ef74 | out: lpFindFileData=0x19ef74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0191.666] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2e4 | out: puCount=0x19f2e4*=0x2) returned 0x0
	[0191.666] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2e0*=0x0, pszText=0x0 | out: puBuffLength=0x19f2e0*=0xf, pszText=0x0) returned 0x0
	[0191.666] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2e0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2e0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.667] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f270 | out: ppv=0x19f270*=0x6d0ae4) returned 0x0
	[0191.667] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f268 | out: pAptType=0x19f268*=1) returned 0x0
	[0191.667] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f26c | out: ppvObject=0x19f26c*=0x0) returned 0x80004002
	[0191.667] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0191.667] CoGetClassObject (in: rclsid=0x57af89c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee90 | out: ppv=0x19ee90*=0x5dd4ed8) returned 0x0
	[0191.668] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd4ed8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f0a8 | out: ppvObject=0x19f0a8*=0x0) returned 0x80004002
	[0191.668] WbemLocator:IClassFactory:CreateInstance (in: This=0x5dd4ed8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x57a2ff8) returned 0x0
	[0191.668] WbemLocator:IUnknown:Release (This=0x5dd4ed8) returned 0x0
	[0191.668] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2ff8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecdc | out: ppvObject=0x19ecdc*=0x57a2ff8) returned 0x0
	[0191.668] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2ff8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec98 | out: ppvObject=0x19ec98*=0x0) returned 0x80004002
	[0191.668] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2ff8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e88c | out: ppvObject=0x19e88c*=0x0) returned 0x80004002
	[0191.668] WbemLocator:IUnknown:AddRef (This=0x57a2ff8) returned 0x3
	[0191.668] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2ff8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5f4 | out: ppvObject=0x19e5f4*=0x0) returned 0x80004002
	[0191.668] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2ff8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5a4 | out: ppvObject=0x19e5a4*=0x0) returned 0x80004002
	[0191.668] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2ff8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5b0 | out: ppvObject=0x19e5b0*=0x0) returned 0x80004002
	[0191.668] CoGetContextToken (in: pToken=0x19e610 | out: pToken=0x19e610) returned 0x0
	[0191.668] CoGetContextToken (in: pToken=0x19ea18 | out: pToken=0x19ea18) returned 0x0
	[0191.668] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2ff8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eaa8 | out: ppvObject=0x19eaa8*=0x0) returned 0x80004002
	[0191.668] WbemLocator:IUnknown:Release (This=0x57a2ff8) returned 0x2
	[0191.668] WbemLocator:IUnknown:Release (This=0x57a2ff8) returned 0x1
	[0191.668] CoGetContextToken (in: pToken=0x19f088 | out: pToken=0x19f088) returned 0x0
	[0191.668] CoGetContextToken (in: pToken=0x19efe8 | out: pToken=0x19efe8) returned 0x0
	[0191.668] WbemLocator:IUnknown:QueryInterface (in: This=0x57a2ff8, riid=0x19f0b8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f0b4 | out: ppvObject=0x19f0b4*=0x57a2ff8) returned 0x0
	[0191.668] WbemLocator:IUnknown:AddRef (This=0x57a2ff8) returned 0x3
	[0191.668] WbemLocator:IUnknown:Release (This=0x57a2ff8) returned 0x2
	[0191.668] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f24c | out: puCount=0x19f24c*=0x2) returned 0x0
	[0191.668] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f248*=0x0, pszText=0x0 | out: puBuffLength=0x19f248*=0xf, pszText=0x0) returned 0x0
	[0191.670] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=8, puBuffLength=0x19f248*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f248*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.670] CoCreateInstance (in: rclsid=0x6cbd1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6cbd12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f124 | out: ppv=0x19f124*=0x57a3028) returned 0x0
	[0191.670] WbemLocator:IWbemLocator:ConnectServer (in: This=0x57a3028, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1b8 | out: ppNamespace=0x19f1b8*=0x5dd8158) returned 0x0
	[0191.698] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8158, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f054 | out: ppvObject=0x19f054*=0x57b1dd4) returned 0x0
	[0191.698] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x57b1dd4, pProxy=0x5dd8158, pAuthnSvc=0x19f0a4, pAuthzSvc=0x19f0a0, pServerPrincName=0x19f098, pAuthnLevel=0x19f09c, pImpLevel=0x19f08c, pAuthInfo=0x19f090, pCapabilites=0x19f094 | out: pAuthnSvc=0x19f0a4*=0xa, pAuthzSvc=0x19f0a0*=0x0, pServerPrincName=0x19f098, pAuthnLevel=0x19f09c*=0x6, pImpLevel=0x19f08c*=0x2, pAuthInfo=0x19f090, pCapabilites=0x19f094*=0x1) returned 0x0
	[0191.699] WbemLocator:IUnknown:Release (This=0x57b1dd4) returned 0x1
	[0191.699] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8158, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f048 | out: ppvObject=0x19f048*=0x57b1df8) returned 0x0
	[0191.699] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8158, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x57b1dd4) returned 0x0
	[0191.699] WbemLocator:IClientSecurity:SetBlanket (This=0x57b1dd4, pProxy=0x5dd8158, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0191.699] WbemLocator:IUnknown:Release (This=0x57b1dd4) returned 0x2
	[0191.699] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x1
	[0191.699] CoTaskMemFree (pv=0x57b7f00) 
	[0191.699] WbemLocator:IUnknown:Release (This=0x57a3028) returned 0x0
	[0191.699] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8158, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec44 | out: ppvObject=0x19ec44*=0x57b1df8) returned 0x0
	[0191.699] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec00 | out: ppvObject=0x19ec00*=0x0) returned 0x80004002
	[0191.700] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea1c | out: ppvObject=0x19ea1c*=0x0) returned 0x80004002
	[0191.702] WbemLocator:IUnknown:QueryInterface (in: This=0x5dd8158, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7f4 | out: ppvObject=0x19e7f4*=0x0) returned 0x80004002
	[0191.703] WbemLocator:IUnknown:AddRef (This=0x57b1df8) returned 0x3
	[0191.703] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0191.703] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e50c | out: ppvObject=0x19e50c*=0x0) returned 0x80004002
	[0191.703] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e518 | out: ppvObject=0x19e518*=0x57b1d54) returned 0x0
	[0191.704] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1d54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e520 | out: pCid=0x19e520*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.704] WbemLocator:IUnknown:Release (This=0x57b1d54) returned 0x3
	[0191.704] CoGetContextToken (in: pToken=0x19e578 | out: pToken=0x19e578) returned 0x0
	[0191.704] CoGetContextToken (in: pToken=0x19e980 | out: pToken=0x19e980) returned 0x0
	[0191.704] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea10 | out: ppvObject=0x19ea10*=0x57b1ddc) returned 0x0
	[0191.704] WbemLocator:IRpcOptions:Query (in: This=0x57b1ddc, pPrx=0x57b1df8, dwProperty=2, pdwValue=0x19ea38 | out: pdwValue=0x19ea38) returned 0x80004002
	[0191.704] WbemLocator:IUnknown:Release (This=0x57b1ddc) returned 0x3
	[0191.704] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x2
	[0191.704] CoGetContextToken (in: pToken=0x19ef58 | out: pToken=0x19ef58) returned 0x0
	[0191.704] CoGetContextToken (in: pToken=0x19eeb8 | out: pToken=0x19eeb8) returned 0x0
	[0191.704] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x19ef88*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef84 | out: ppvObject=0x19ef84*=0x5dd8158) returned 0x0
	[0191.704] WbemLocator:IUnknown:AddRef (This=0x5dd8158) returned 0x4
	[0191.704] WbemLocator:IUnknown:Release (This=0x5dd8158) returned 0x3
	[0191.704] WbemLocator:IUnknown:Release (This=0x5dd8158) returned 0x2
	[0191.705] SysStringLen (param_1=0x0) returned 0x0
	[0191.705] CoGetContextToken (in: pToken=0x19ef50 | out: pToken=0x19ef50) returned 0x0
	[0191.705] WbemLocator:IUnknown:AddRef (This=0x57b1df8) returned 0x3
	[0191.705] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1df8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ede4 | out: ppvObject=0x19ede4*=0x57b1df8) returned 0x0
	[0191.705] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x3
	[0191.705] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x2
	[0191.705] CoGetContextToken (in: pToken=0x19f038 | out: pToken=0x19f038) returned 0x0
	[0191.705] WbemLocator:IUnknown:AddRef (This=0x5dd8158) returned 0x3
	[0191.705] IWbemServices:ExecQuery (in: This=0x5dd8158, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x19f254 | out: ppEnum=0x19f254*=0x78a650) returned 0x0
	[0191.777] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0ac | out: ppvObject=0x19f0ac*=0x78a654) returned 0x0
	[0191.778] IClientSecurity:QueryBlanket (in: This=0x78a654, pProxy=0x78a650, pAuthnSvc=0x19f0fc, pAuthzSvc=0x19f0f8, pServerPrincName=0x19f0f0, pAuthnLevel=0x19f0f4, pImpLevel=0x19f0e4, pAuthInfo=0x19f0e8, pCapabilites=0x19f0ec | out: pAuthnSvc=0x19f0fc*=0xa, pAuthzSvc=0x19f0f8*=0x0, pServerPrincName=0x19f0f0, pAuthnLevel=0x19f0f4*=0x6, pImpLevel=0x19f0e4*=0x2, pAuthInfo=0x19f0e8, pCapabilites=0x19f0ec*=0x1) returned 0x0
	[0191.778] IUnknown:Release (This=0x78a654) returned 0x1
	[0191.778] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a0 | out: ppvObject=0x19f0a0*=0x57b15f8) returned 0x0
	[0191.778] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x78a654) returned 0x0
	[0191.778] IClientSecurity:SetBlanket (This=0x78a654, pProxy=0x78a650, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0191.798] IUnknown:Release (This=0x78a654) returned 0x2
	[0191.798] WbemLocator:IUnknown:Release (This=0x57b15f8) returned 0x1
	[0191.798] CoTaskMemFree (pv=0x57b7f00) 
	[0191.799] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec98 | out: ppvObject=0x19ec98*=0x57b15f8) returned 0x0
	[0191.799] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec54 | out: ppvObject=0x19ec54*=0x0) returned 0x80004002
	[0191.799] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea74 | out: ppvObject=0x19ea74*=0x0) returned 0x80004002
	[0191.800] IUnknown:QueryInterface (in: This=0x78a650, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e84c | out: ppvObject=0x19e84c*=0x0) returned 0x80004002
	[0191.801] WbemLocator:IUnknown:AddRef (This=0x57b15f8) returned 0x3
	[0191.801] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5b4 | out: ppvObject=0x19e5b4*=0x0) returned 0x80004002
	[0191.801] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e564 | out: ppvObject=0x19e564*=0x0) returned 0x80004002
	[0191.801] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e570 | out: ppvObject=0x19e570*=0x57b1554) returned 0x0
	[0191.801] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1554, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e578 | out: pCid=0x19e578*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.801] WbemLocator:IUnknown:Release (This=0x57b1554) returned 0x3
	[0191.801] CoGetContextToken (in: pToken=0x19e5d0 | out: pToken=0x19e5d0) returned 0x0
	[0191.801] CoGetContextToken (in: pToken=0x19e9d8 | out: pToken=0x19e9d8) returned 0x0
	[0191.802] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea68 | out: ppvObject=0x19ea68*=0x57b15dc) returned 0x0
	[0191.802] WbemLocator:IRpcOptions:Query (in: This=0x57b15dc, pPrx=0x57b15f8, dwProperty=2, pdwValue=0x19ea90 | out: pdwValue=0x19ea90) returned 0x80004002
	[0191.802] WbemLocator:IUnknown:Release (This=0x57b15dc) returned 0x3
	[0191.802] WbemLocator:IUnknown:Release (This=0x57b15f8) returned 0x2
	[0191.802] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0191.802] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0191.802] WbemLocator:IUnknown:QueryInterface (in: This=0x57b15f8, riid=0x19efd8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efd4 | out: ppvObject=0x19efd4*=0x78a650) returned 0x0
	[0191.802] IUnknown:AddRef (This=0x78a650) returned 0x4
	[0191.802] IUnknown:Release (This=0x78a650) returned 0x3
	[0191.802] IUnknown:Release (This=0x78a650) returned 0x2
	[0191.802] WbemLocator:IUnknown:Release (This=0x5dd8158) returned 0x2
	[0191.802] SysStringLen (param_1=0x0) returned 0x0
	[0191.802] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2a0 | out: puCount=0x19f2a0*=0x2) returned 0x0
	[0191.802] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f29c*=0x0, pszText=0x0 | out: puBuffLength=0x19f29c*=0xf, pszText=0x0) returned 0x0
	[0191.802] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f29c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f29c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.802] CoGetContextToken (in: pToken=0x19f0f0 | out: pToken=0x19f0f0) returned 0x0
	[0191.802] IUnknown:AddRef (This=0x78a650) returned 0x3
	[0191.803] IEnumWbemClassObject:Clone (in: This=0x78a650, ppEnum=0x19f2ac | out: ppEnum=0x19f2ac*=0x78a8a8) returned 0x0
	[0191.804] IUnknown:QueryInterface (in: This=0x78a8a8, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f170 | out: ppvObject=0x19f170*=0x78a8ac) returned 0x0
	[0191.804] IClientSecurity:QueryBlanket (in: This=0x78a8ac, pProxy=0x78a8a8, pAuthnSvc=0x19f1c0, pAuthzSvc=0x19f1bc, pServerPrincName=0x19f1b4, pAuthnLevel=0x19f1b8, pImpLevel=0x19f1a8, pAuthInfo=0x19f1ac, pCapabilites=0x19f1b0 | out: pAuthnSvc=0x19f1c0*=0xa, pAuthzSvc=0x19f1bc*=0x0, pServerPrincName=0x19f1b4, pAuthnLevel=0x19f1b8*=0x6, pImpLevel=0x19f1a8*=0x2, pAuthInfo=0x19f1ac, pCapabilites=0x19f1b0*=0x1) returned 0x0
	[0191.804] IUnknown:Release (This=0x78a8ac) returned 0x1
	[0191.804] IUnknown:QueryInterface (in: This=0x78a8a8, riid=0x6cbd10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f164 | out: ppvObject=0x19f164*=0x57b1bf8) returned 0x0
	[0191.804] IUnknown:QueryInterface (in: This=0x78a8a8, riid=0x6cbd1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f160 | out: ppvObject=0x19f160*=0x78a8ac) returned 0x0
	[0191.804] IClientSecurity:SetBlanket (This=0x78a8ac, pProxy=0x78a8a8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0191.808] IUnknown:Release (This=0x78a8ac) returned 0x2
	[0191.808] WbemLocator:IUnknown:Release (This=0x57b1bf8) returned 0x1
	[0191.808] CoTaskMemFree (pv=0x57b7f30) 
	[0191.808] IUnknown:QueryInterface (in: This=0x78a8a8, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed4c | out: ppvObject=0x19ed4c*=0x57b1bf8) returned 0x0
	[0191.809] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1bf8, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ed08 | out: ppvObject=0x19ed08*=0x0) returned 0x80004002
	[0191.810] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1bf8, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb24 | out: ppvObject=0x19eb24*=0x0) returned 0x80004002
	[0191.811] IUnknown:QueryInterface (in: This=0x78a8a8, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8fc | out: ppvObject=0x19e8fc*=0x0) returned 0x80004002
	[0191.812] WbemLocator:IUnknown:AddRef (This=0x57b1bf8) returned 0x3
	[0191.812] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1bf8, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e664 | out: ppvObject=0x19e664*=0x0) returned 0x80004002
	[0191.812] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1bf8, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e614 | out: ppvObject=0x19e614*=0x0) returned 0x80004002
	[0191.812] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1bf8, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e620 | out: ppvObject=0x19e620*=0x57b1b54) returned 0x0
	[0191.812] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x57b1b54, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e628 | out: pCid=0x19e628*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.812] WbemLocator:IUnknown:Release (This=0x57b1b54) returned 0x3
	[0191.812] CoGetContextToken (in: pToken=0x19e680 | out: pToken=0x19e680) returned 0x0
	[0191.812] CoGetContextToken (in: pToken=0x19ea88 | out: pToken=0x19ea88) returned 0x0
	[0191.812] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1bf8, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb18 | out: ppvObject=0x19eb18*=0x57b1bdc) returned 0x0
	[0191.813] WbemLocator:IRpcOptions:Query (in: This=0x57b1bdc, pPrx=0x57b1bf8, dwProperty=2, pdwValue=0x19eb40 | out: pdwValue=0x19eb40) returned 0x80004002
	[0191.813] WbemLocator:IUnknown:Release (This=0x57b1bdc) returned 0x3
	[0191.813] WbemLocator:IUnknown:Release (This=0x57b1bf8) returned 0x2
	[0191.813] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0191.813] CoGetContextToken (in: pToken=0x19efc0 | out: pToken=0x19efc0) returned 0x0
	[0191.813] WbemLocator:IUnknown:QueryInterface (in: This=0x57b1bf8, riid=0x19f090*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f08c | out: ppvObject=0x19f08c*=0x78a8a8) returned 0x0
	[0191.813] IUnknown:AddRef (This=0x78a8a8) returned 0x4
	[0191.813] IUnknown:Release (This=0x78a8a8) returned 0x3
	[0191.814] IUnknown:Release (This=0x78a8a8) returned 0x2
	[0191.814] IUnknown:Release (This=0x78a650) returned 0x2
	[0191.814] SysStringLen (param_1=0x0) returned 0x0
	[0191.814] IEnumWbemClassObject:Reset (This=0x78a8a8) returned 0x0
	[0191.815] CoTaskMemAlloc (cb=0x4) returned 0x57a2ed8
	[0191.815] IEnumWbemClassObject:Next (in: This=0x78a8a8, lTimeout=-1, uCount=0x1, apObjects=0x57a2ed8, puReturned=0x2ad0d2c | out: apObjects=0x57a2ed8*=0x5de0a38, puReturned=0x2ad0d2c*=0x1) returned 0x0
	[0191.826] IUnknown:QueryInterface (in: This=0x5de0a38, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e910 | out: ppvObject=0x19e910*=0x5de0a38) returned 0x0
	[0191.826] IUnknown:QueryInterface (in: This=0x5de0a38, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8cc | out: ppvObject=0x19e8cc*=0x0) returned 0x80004002
	[0191.826] IUnknown:QueryInterface (in: This=0x5de0a38, riid=0x6bc8fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e6ec | out: ppvObject=0x19e6ec*=0x0) returned 0x80004002
	[0191.826] IUnknown:QueryInterface (in: This=0x5de0a38, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4c4 | out: ppvObject=0x19e4c4*=0x0) returned 0x80004002
	[0191.826] IUnknown:AddRef (This=0x5de0a38) returned 0x3
	[0191.826] IUnknown:QueryInterface (in: This=0x5de0a38, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e22c | out: ppvObject=0x19e22c*=0x0) returned 0x80004002
	[0191.826] IUnknown:QueryInterface (in: This=0x5de0a38, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1dc | out: ppvObject=0x19e1dc*=0x0) returned 0x80004002
	[0191.826] IUnknown:QueryInterface (in: This=0x5de0a38, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e1e8 | out: ppvObject=0x19e1e8*=0x5de0a3c) returned 0x0
	[0191.827] IMarshal:GetUnmarshalClass (in: This=0x5de0a3c, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e1f0 | out: pCid=0x19e1f0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0191.827] IUnknown:Release (This=0x5de0a3c) returned 0x3
	[0191.827] CoGetContextToken (in: pToken=0x19e248 | out: pToken=0x19e248) returned 0x0
	[0191.827] CoGetContextToken (in: pToken=0x19e650 | out: pToken=0x19e650) returned 0x0
	[0191.827] IUnknown:QueryInterface (in: This=0x5de0a38, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6e0 | out: ppvObject=0x19e6e0*=0x0) returned 0x80004002
	[0191.827] IUnknown:Release (This=0x5de0a38) returned 0x2
	[0191.827] CoGetContextToken (in: pToken=0x19ec20 | out: pToken=0x19ec20) returned 0x0
	[0191.827] CoGetContextToken (in: pToken=0x19eb80 | out: pToken=0x19eb80) returned 0x0
	[0191.827] IUnknown:QueryInterface (in: This=0x5de0a38, riid=0x19ec50*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec4c | out: ppvObject=0x19ec4c*=0x5de0a38) returned 0x0
	[0191.827] IUnknown:AddRef (This=0x5de0a38) returned 0x4
	[0191.827] IUnknown:Release (This=0x5de0a38) returned 0x3
	[0191.827] IUnknown:Release (This=0x5de0a38) returned 0x2
	[0191.827] CoTaskMemFree (pv=0x57a2ed8) 
	[0191.827] CoGetContextToken (in: pToken=0x19ef88 | out: pToken=0x19ef88) returned 0x0
	[0191.827] IUnknown:AddRef (This=0x5de0a38) returned 0x3
	[0191.827] IWbemClassObject:Get (in: This=0x5de0a38, wszName="__GENUS", lFlags=0, pVal=0x19f29c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f29c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f31c*=3, plFlavor=0x19f318*=64) returned 0x0
	[0191.827] IWbemClassObject:Get (in: This=0x5de0a38, wszName="__PATH", lFlags=0, pVal=0x19f280*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f304*=0, plFlavor=0x19f300*=0 | out: pVal=0x19f280*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x19f304*=8, plFlavor=0x19f300*=64) returned 0x0
	[0191.828] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72
	[0191.828] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72
	[0191.828] CoGetObjectContext (in: riid=0x289083c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2ac | out: ppv=0x19f2ac*=0x6d0ae4) returned 0x0
	[0191.828] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6d0ae4, pAptType=0x19f2a4 | out: pAptType=0x19f2a4*=1) returned 0x0
	[0191.828] IUnknown:QueryInterface (in: This=0x6d0ae4, riid=0x2890824*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2a8 | out: ppvObject=0x19f2a8*=0x0) returned 0x80004002
	[0191.828] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0191.829] CoGetClassObject (in: rclsid=0x57af9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6bc054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec18 | out: ppv=0x19ec18*=0x57a2fc8) returned 0x0
	[0191.829] WbemDefPath:IUnknown:QueryInterface (in: This=0x57a2fc8, riid=0x6bbb95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee30 | out: ppvObject=0x19ee30*=0x0) returned 0x80004002
	[0191.829] WbemDefPath:IClassFactory:CreateInstance (in: This=0x57a2fc8, pUnkOuter=0x0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee44 | out: ppvObject=0x19ee44*=0x588d8b0) returned 0x0
	[0191.829] WbemDefPath:IUnknown:Release (This=0x57a2fc8) returned 0x0
	[0191.829] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d8b0, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea64 | out: ppvObject=0x19ea64*=0x588d8b0) returned 0x0
	[0191.829] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d8b0, riid=0x6bc8fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea20 | out: ppvObject=0x19ea20*=0x0) returned 0x80004002
	[0191.829] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d8b0, riid=0x6bc9056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e614 | out: ppvObject=0x19e614*=0x0) returned 0x80004002
	[0191.829] WbemDefPath:IUnknown:AddRef (This=0x588d8b0) returned 0x3
	[0191.829] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d8b0, riid=0x6bc90208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e37c | out: ppvObject=0x19e37c*=0x0) returned 0x80004002
	[0191.829] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d8b0, riid=0x6bc9015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e32c | out: ppvObject=0x19e32c*=0x0) returned 0x80004002
	[0191.829] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d8b0, riid=0x6bb640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e338 | out: ppvObject=0x19e338*=0x5dd4f20) returned 0x0
	[0191.830] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5dd4f20, riid=0x6bb56c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e340 | out: pCid=0x19e340*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0191.830] WbemDefPath:IUnknown:Release (This=0x5dd4f20) returned 0x3
	[0191.830] CoGetContextToken (in: pToken=0x19e398 | out: pToken=0x19e398) returned 0x0
	[0191.830] CoGetContextToken (in: pToken=0x19e7a0 | out: pToken=0x19e7a0) returned 0x0
	[0191.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d8b0, riid=0x6bc90448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x0) returned 0x80004002
	[0191.830] WbemDefPath:IUnknown:Release (This=0x588d8b0) returned 0x2
	[0191.830] WbemDefPath:IUnknown:Release (This=0x588d8b0) returned 0x1
	[0191.830] CoGetContextToken (in: pToken=0x19f128 | out: pToken=0x19f128) returned 0x0
	[0191.830] CoGetContextToken (in: pToken=0x19f088 | out: pToken=0x19f088) returned 0x0
	[0191.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x588d8b0, riid=0x19f158*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f154 | out: ppvObject=0x19f154*=0x588d8b0) returned 0x0
	[0191.830] WbemDefPath:IUnknown:AddRef (This=0x588d8b0) returned 0x3
	[0191.830] WbemDefPath:IUnknown:Release (This=0x588d8b0) returned 0x2
	[0191.830] WbemDefPath:IWbemPath:SetText (This=0x588d8b0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0
	[0191.830] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2d8 | out: puCount=0x19f2d8*=0x2) returned 0x0
	[0191.830] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2d4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2d4*=0xf, pszText=0x0) returned 0x0
	[0191.830] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2d4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2d4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.830] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x703ae0, puCount=0x19f2a4 | out: puCount=0x19f2a4*=0x2) returned 0x0
	[0191.830] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2a0*=0x0, pszText=0x0 | out: puBuffLength=0x19f2a0*=0xf, pszText=0x0) returned 0x0
	[0191.830] WbemDefPath:IWbemPath:GetText (in: This=0x703ae0, lFlags=4, puBuffLength=0x19f2a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2a0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0191.830] IWbemClassObject:Get (in: This=0x5de0a38, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x19f2a0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad1544*=0, plFlavor=0x2ad1548*=0 | out: pVal=0x19f2a0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2ad1544*=21, plFlavor=0x2ad1548*=0) returned 0x0
	[0191.830] SysStringByteLen (bstr="2096620") returned 0xe
	[0191.831] SysStringByteLen (bstr="2096620") returned 0xe
	[0191.831] IWbemClassObject:Get (in: This=0x5de0a38, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x19f2a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad1544*=21, plFlavor=0x2ad1548*=0 | out: pVal=0x19f2a8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2ad1544*=21, plFlavor=0x2ad1548*=0) returned 0x0
	[0191.831] SysStringByteLen (bstr="2096620") returned 0xe
	[0191.831] SysStringByteLen (bstr="2096620") returned 0xe
	[0191.834] CoTaskMemAlloc (cb=0x4) returned 0x57a3048
	[0191.834] IEnumWbemClassObject:Next (in: This=0x78a8a8, lTimeout=-1, uCount=0x1, apObjects=0x57a3048, puReturned=0x2ad0d2c | out: apObjects=0x57a3048*=0x0, puReturned=0x2ad0d2c*=0x0) returned 0x1
	[0191.835] CoTaskMemFree (pv=0x57a3048) 
	[0191.835] CoGetContextToken (in: pToken=0x19f1d8 | out: pToken=0x19f1d8) returned 0x0
	[0191.835] WbemLocator:IUnknown:Release (This=0x57b1bf8) returned 0x1
	[0191.835] IUnknown:Release (This=0x78a8a8) returned 0x0
	[0191.837] CoGetContextToken (in: pToken=0x19f1d8 | out: pToken=0x19f1d8) returned 0x0
	[0191.837] WbemLocator:IUnknown:Release (This=0x57b15f8) returned 0x1
	[0191.837] IUnknown:Release (This=0x78a650) returned 0x0
	[0191.842] CoTaskMemAlloc (cb=0x20c) returned 0x5836bc8
	[0191.843] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x5836bc8 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local") returned 0x0
	[0191.843] CoTaskMemFree (pv=0x5836bc8) 
	[0191.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x19edf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23
	[0191.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon", nBufferLength=0x105, lpBuffer=0x19ee88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon", lpFilePart=0x0) returned 0x32
	[0191.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1
	[0191.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yaaddon"), fInfoLevelId=0x0, lpFileInformation=0x19f360 | out: lpFileInformation=0x19f360*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0191.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1
	[0191.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon", nBufferLength=0x105, lpBuffer=0x19ee8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon", lpFilePart=0x0) returned 0x32
	[0191.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f274) returned 1
	[0191.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yaaddon"), fInfoLevelId=0x0, lpFileInformation=0x19f2f0 | out: lpFileInformation=0x19f2f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0191.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f270) returned 1
	[0191.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f274) returned 1
	[0191.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yaaddon"), fInfoLevelId=0x0, lpFileInformation=0x19f2f0 | out: lpFileInformation=0x19f2f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0191.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f270) returned 1
	[0191.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f274) returned 1
	[0191.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex"), fInfoLevelId=0x0, lpFileInformation=0x19f2f0 | out: lpFileInformation=0x19f2f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0191.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f270) returned 1
	[0191.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f274) returned 1
	[0191.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x19f2f0 | out: lpFileInformation=0x19f2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0191.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f270) returned 1
	[0191.847] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex"), lpSecurityAttributes=0x0) returned 1
	[0191.858] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yaaddon"), lpSecurityAttributes=0x0) returned 1
	[0191.883] CoCreateGuid (in: pguid=0x19efd4 | out: pguid=0x19efd4*(Data1=0xbfd79f5, Data2=0x2e9e, Data3=0x40b4, Data4=([0]=0x87, [1]=0x1f, [2]=0x56, [3]=0xe6, [4]=0xe2, [5]=0x40, [6]=0xe7, [7]=0xa8))) returned 0x0
	[0191.884] QueryPerformanceCounter (in: lpPerformanceCount=0x19ed74 | out: lpPerformanceCount=0x19ed74*=1859235094915) returned 1
	[0192.307] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x19df04 | out: phkResult=0x19df04*=0x0) returned 0x2
	[0192.307] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x19df04 | out: phkResult=0x19df04*=0x0) returned 0x2
	[0192.350] SetEvent (hEvent=0x2c8) returned 1
	[0192.350] select (in: nfds=0, readfds=0x287d514, writefds=0x0, exceptfds=0x0, timeout=0x19ed2c*(tv_sec=0, tv_usec=0) | out: readfds=0x287d514, writefds=0x0, exceptfds=0x0) returned 0
	[0192.359] send (s=0x498, buf=0x2729aa4*, len=222, flags=0) returned 222
	[0192.360] select (in: nfds=0, readfds=0x287dc6c, writefds=0x0, exceptfds=0x0, timeout=0x19eda8*(tv_sec=0, tv_usec=350000) | out: readfds=0x287dc6c, writefds=0x0, exceptfds=0x0) returned 1
	[0192.402] recv (in: s=0x498, buf=0x2727be8, len=4096, flags=0 | out: buf=0x2727be8*) returned 25
	[0192.402] CoTaskMemAlloc (cb=0x8) returned 0x57a2ff8
	[0192.403] WSASend (in: s=0x498, lpBuffers=0x57a2ff8*=((len=0x760e9, buf=0x38073c8*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x19ecac, dwFlags=0x0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x19ecac*=0x760e9, lpOverlapped=0x0) returned 0
	[0192.410] CoTaskMemFree (pv=0x57a2ff8) 
	[0192.410] recv (in: s=0x498, buf=0x2727be8, len=4096, flags=0 | out: buf=0x2727be8*) returned 294
	[0193.589] CoCreateGuid (in: pguid=0x19efd0 | out: pguid=0x19efd0*(Data1=0xed741f33, Data2=0x80c3, Data3=0x48e3, Data4=([0]=0xb2, [1]=0xd1, [2]=0xae, [3]=0x80, [4]=0xe1, [5]=0xa2, [6]=0x21, [7]=0x3e))) returned 0x0
	[0193.589] QueryPerformanceCounter (in: lpPerformanceCount=0x19ed70 | out: lpPerformanceCount=0x19ed70*=1859405605215) returned 1
	[0193.599] SetEvent (hEvent=0x2c8) returned 1
	[0193.600] select (in: nfds=0, readfds=0x287f364, writefds=0x0, exceptfds=0x0, timeout=0x19ed28*(tv_sec=0, tv_usec=0) | out: readfds=0x287f364, writefds=0x0, exceptfds=0x0) returned 0
	[0193.611] send (s=0x498, buf=0x2729aa4*, len=218, flags=0) returned 218
	[0193.611] select (in: nfds=0, readfds=0x287fa58, writefds=0x0, exceptfds=0x0, timeout=0x19eda4*(tv_sec=0, tv_usec=350000) | out: readfds=0x287fa58, writefds=0x0, exceptfds=0x0) returned 1
	[0193.637] setsockopt (s=0x498, level=65535, optname=4102, optval="@w\x1b", optlen=4) returned 0
	[0193.637] recv (in: s=0x498, buf=0x2727be8, len=4096, flags=0 | out: buf=0x2727be8*) returned 25
	[0193.637] CoTaskMemAlloc (cb=0x8) returned 0x57a2f48
	[0193.637] WSASend (in: s=0x498, lpBuffers=0x57a2f48*=((len=0x760e1, buf=0x387d4d0*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x19eca8, dwFlags=0x0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x19eca8*=0x760e1, lpOverlapped=0x0) returned 0
	[0193.645] CoTaskMemFree (pv=0x57a2f48) 
	[0193.645] recv (in: s=0x498, buf=0x2727be8, len=4096, flags=0 | out: buf=0x2727be8*) returned 408
	[0194.414] CoGetContextToken (in: pToken=0x19fdc0 | out: pToken=0x19fdc0) returned 0x0
	[0194.414] IUnknown:QueryInterface (in: This=0x6d0ad8, riid=0x6bbd4564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fde4 | out: ppvObject=0x19fde4*=0x6d0ae4) returned 0x0
	[0194.415] IComThreadingInfo:GetCurrentThreadType (in: This=0x6d0ae4, pThreadType=0x19fe44 | out: pThreadType=0x19fe44*=0) returned 0x0
	[0194.415] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0194.415] CoGetContextToken (in: pToken=0x19fadc | out: pToken=0x19fadc) returned 0x0
	[0194.415] IUnknown:QueryInterface (in: This=0x6d0ad8, riid=0x6bbd4564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fb00 | out: ppvObject=0x19fb00*=0x6d0ae4) returned 0x0
	[0194.415] IComThreadingInfo:GetCurrentThreadType (in: This=0x6d0ae4, pThreadType=0x19fb2c | out: pThreadType=0x19fb2c*=0) returned 0x0
	[0194.416] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0194.443] CoGetContextToken (in: pToken=0x19fadc | out: pToken=0x19fadc) returned 0x0
	[0194.443] IUnknown:QueryInterface (in: This=0x6d0ad8, riid=0x6bbd4564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fb00 | out: ppvObject=0x19fb00*=0x6d0ae4) returned 0x0
	[0194.443] IComThreadingInfo:GetCurrentThreadType (in: This=0x6d0ae4, pThreadType=0x19fb2c | out: pThreadType=0x19fb2c*=0) returned 0x0
	[0194.443] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0194.548] CoGetContextToken (in: pToken=0x19fadc | out: pToken=0x19fadc) returned 0x0
	[0194.548] IUnknown:QueryInterface (in: This=0x6d0ad8, riid=0x6bbd4564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fb00 | out: ppvObject=0x19fb00*=0x6d0ae4) returned 0x0
	[0194.548] IComThreadingInfo:GetCurrentThreadType (in: This=0x6d0ae4, pThreadType=0x19fb2c | out: pThreadType=0x19fb2c*=0) returned 0x0
	[0194.548] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0194.587] CoGetContextToken (in: pToken=0x19faf4 | out: pToken=0x19faf4) returned 0x0
	[0194.587] IUnknown:QueryInterface (in: This=0x6d0ad8, riid=0x6bbd4564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fb18 | out: ppvObject=0x19fb18*=0x6d0ae4) returned 0x0
	[0194.587] IComThreadingInfo:GetCurrentThreadType (in: This=0x6d0ae4, pThreadType=0x19fb44 | out: pThreadType=0x19fb44*=0) returned 0x0
	[0194.587] IUnknown:Release (This=0x6d0ae4) returned 0x0
	[0194.588] CoUninitialize () 

Thread:
	id = 12
	os_tid = 0x578


Thread:
	id = 13
	os_tid = 0x978


Thread:
	id = 14
	os_tid = 0x68c

	[0105.342] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0105.342] RoInitialize () returned 0x1
	[0105.342] RoUninitialize () returned 0x0
	[0187.467] CoGetContextToken (in: pToken=0xe8fc30 | out: pToken=0xe8fc30) returned 0x0
	[0187.467] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.467] WbemLocator:IUnknown:Release (This=0x57a2de8) returned 0x1
	[0187.467] WbemLocator:IUnknown:Release (This=0x57a2de8) returned 0x0
	[0187.468] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.468] IUnknown:Release (This=0x57b7330) returned 0x2
	[0187.468] IUnknown:Release (This=0x57b7330) returned 0x1
	[0187.468] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.468] WbemLocator:IUnknown:Release (This=0x57a2cd8) returned 0x1
	[0187.468] WbemLocator:IUnknown:Release (This=0x57a2cd8) returned 0x0
	[0187.468] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.468] IUnknown:Release (This=0x78ee50) returned 0x2
	[0187.468] IUnknown:Release (This=0x78ee50) returned 0x1
	[0187.468] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.468] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x1
	[0187.468] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0187.468] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.468] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x1
	[0187.468] WbemLocator:IUnknown:Release (This=0x785840) returned 0x0
	[0187.469] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.469] WbemLocator:IUnknown:Release (This=0x57a2e58) returned 0x1
	[0187.469] WbemLocator:IUnknown:Release (This=0x57a2e58) returned 0x0
	[0187.469] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.469] IUnknown:Release (This=0x5825f20) returned 0x2
	[0187.469] IUnknown:Release (This=0x5825f20) returned 0x1
	[0187.469] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.469] WbemLocator:IUnknown:Release (This=0x57a2d28) returned 0x1
	[0187.469] WbemLocator:IUnknown:Release (This=0x57a2d28) returned 0x0
	[0187.469] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.469] WbemLocator:IUnknown:Release (This=0x57b13f8) returned 0x1
	[0187.469] WbemLocator:IUnknown:Release (This=0x785d40) returned 0x0
	[0187.469] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.469] WbemLocator:IUnknown:Release (This=0x57a2d98) returned 0x1
	[0187.470] WbemLocator:IUnknown:Release (This=0x57a2d98) returned 0x0
	[0187.470] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.470] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x1
	[0187.470] WbemLocator:IUnknown:Release (This=0x785b10) returned 0x0
	[0187.470] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.470] WbemLocator:IUnknown:Release (This=0x57a2d38) returned 0x1
	[0187.470] WbemLocator:IUnknown:Release (This=0x57a2d38) returned 0x0
	[0187.470] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.470] WbemLocator:IUnknown:Release (This=0x57b0af8) returned 0x1
	[0187.470] WbemLocator:IUnknown:Release (This=0x785cf0) returned 0x0
	[0187.471] CoGetContextToken (in: pToken=0xe8fc30 | out: pToken=0xe8fc30) returned 0x0
	[0187.471] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.471] WbemDefPath:IUnknown:Release (This=0x7038b0) returned 0x1
	[0187.471] WbemDefPath:IUnknown:Release (This=0x7038b0) returned 0x0
	[0187.471] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.471] WbemDefPath:IUnknown:Release (This=0x57abf78) returned 0x1
	[0187.471] WbemDefPath:IUnknown:Release (This=0x57abf78) returned 0x0
	[0187.471] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.471] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x1
	[0187.471] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x0
	[0187.471] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0187.471] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x1
	[0187.471] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x0
	[0187.471] IUnknown:Release (This=0x78ee50) returned 0x0
	[0187.471] IUnknown:Release (This=0x57b7330) returned 0x0
	[0187.472] IUnknown:Release (This=0x5825f20) returned 0x0
	[0187.472] CloseHandle (hObject=0x258) returned 1
	[0187.474] CertFreeCertificateContext (pCertContext=0x7516c0) returned 1
	[0187.474] CloseHandle (hObject=0x3fc) returned 1
	[0187.474] CloseHandle (hObject=0x3f8) returned 1
	[0187.474] CloseHandle (hObject=0x3f4) returned 1
	[0187.474] RegCloseKey (hKey=0x6d4) returned 0x0
	[0187.475] CloseHandle (hObject=0x3e8) returned 1
	[0187.475] CertFreeCertificateContext (pCertContext=0x7518a0) returned 1
	[0187.475] CertFreeCertificateContext (pCertContext=0x751170) returned 1
	[0187.475] CloseHandle (hObject=0x2e4) returned 1
	[0187.475] CertFreeCertificateContext (pCertContext=0x7513f0) returned 1
	[0187.475] CloseHandle (hObject=0x2e0) returned 1
	[0187.476] CloseHandle (hObject=0x2dc) returned 1
	[0187.476] CloseHandle (hObject=0x4fc) returned 1
	[0187.476] CloseHandle (hObject=0x2d8) returned 1
	[0187.476] CloseHandle (hObject=0x2d4) returned 1
	[0187.476] RegCloseKey (hKey=0x6d0) returned 0x0
	[0187.476] CloseHandle (hObject=0x2c0) returned 1
	[0187.477] CloseHandle (hObject=0x20c) returned 1
	[0187.477] CloseHandle (hObject=0x2b0) returned 1
	[0187.477] RegCloseKey (hKey=0x6d8) returned 0x0
	[0187.477] CloseHandle (hObject=0x2ac) returned 1
	[0187.477] CloseHandle (hObject=0x280) returned 1
	[0187.478] CloseHandle (hObject=0x2a8) returned 1
	[0187.478] CloseHandle (hObject=0x2a4) returned 1
	[0187.478] CloseHandle (hObject=0x2a0) returned 1
	[0187.478] CertCloseStore (hCertStore=0x6fca10, dwFlags=0x0) returned 1
	[0187.478] CloseHandle (hObject=0x29c) returned 1
	[0187.478] CloseHandle (hObject=0x298) returned 1
	[0187.478] CloseHandle (hObject=0x294) returned 1
	[0187.479] CloseHandle (hObject=0x4a0) returned 1
	[0187.479] CloseHandle (hObject=0x290) returned 1
	[0187.479] CloseHandle (hObject=0x28c) returned 1
	[0187.479] CloseHandle (hObject=0x49c) returned 1
	[0187.479] CertFreeCertificateContext (pCertContext=0x7513f0) returned 1
	[0187.479] CloseHandle (hObject=0x288) returned 1
	[0187.479] CloseHandle (hObject=0x284) returned 1
	[0192.007] CoGetContextToken (in: pToken=0xe8fc30 | out: pToken=0xe8fc30) returned 0x0
	[0192.007] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.007] IUnknown:Release (This=0x732190) returned 0x2
	[0192.007] IUnknown:Release (This=0x732190) returned 0x1
	[0192.007] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.007] IUnknown:Release (This=0x731b30) returned 0x2
	[0192.007] IUnknown:Release (This=0x731b30) returned 0x1
	[0192.007] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.007] WbemLocator:IUnknown:Release (This=0x57b10f8) returned 0x1
	[0192.007] WbemLocator:IUnknown:Release (This=0x7857a0) returned 0x0
	[0192.009] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.009] IUnknown:Release (This=0x583a730) returned 0x2
	[0192.009] IUnknown:Release (This=0x583a730) returned 0x1
	[0192.009] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.009] IUnknown:Release (This=0x583a2a8) returned 0x2
	[0192.009] IUnknown:Release (This=0x583a2a8) returned 0x1
	[0192.009] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.009] WbemLocator:IUnknown:Release (This=0x57b14f8) returned 0x1
	[0192.009] WbemLocator:IUnknown:Release (This=0x7857f0) returned 0x0
	[0192.010] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.010] IUnknown:Release (This=0x5830198) returned 0x2
	[0192.010] IUnknown:Release (This=0x5830198) returned 0x1
	[0192.010] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.010] IUnknown:Release (This=0x5839648) returned 0x2
	[0192.010] IUnknown:Release (This=0x5839648) returned 0x1
	[0192.010] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.010] IUnknown:Release (This=0x5830000) returned 0x2
	[0192.010] IUnknown:Release (This=0x5830000) returned 0x1
	[0192.010] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.010] IUnknown:Release (This=0x5793e08) returned 0x2
	[0192.010] IUnknown:Release (This=0x5793e08) returned 0x1
	[0192.010] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.010] IUnknown:Release (This=0x5793c70) returned 0x2
	[0192.010] IUnknown:Release (This=0x5793c70) returned 0x1
	[0192.010] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.010] WbemLocator:IUnknown:Release (This=0x57b03f8) returned 0x1
	[0192.010] WbemLocator:IUnknown:Release (This=0x785930) returned 0x0
	[0192.011] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.011] IUnknown:Release (This=0x5793318) returned 0x2
	[0192.011] IUnknown:Release (This=0x5793318) returned 0x1
	[0192.011] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.011] IUnknown:Release (This=0x5825f48) returned 0x2
	[0192.011] IUnknown:Release (This=0x5825f48) returned 0x1
	[0192.011] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.011] IUnknown:Release (This=0x5825ae8) returned 0x2
	[0192.011] IUnknown:Release (This=0x5825ae8) returned 0x1
	[0192.011] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.011] IUnknown:Release (This=0x5825228) returned 0x2
	[0192.011] IUnknown:Release (This=0x5825228) returned 0x1
	[0192.011] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.011] IUnknown:Release (This=0x78eb70) returned 0x2
	[0192.011] IUnknown:Release (This=0x78eb70) returned 0x1
	[0192.012] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.012] IUnknown:Release (This=0x6adb58) returned 0x2
	[0192.012] IUnknown:Release (This=0x6adb58) returned 0x1
	[0192.012] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.012] IUnknown:Release (This=0x57b7330) returned 0x2
	[0192.012] IUnknown:Release (This=0x57b7330) returned 0x1
	[0192.012] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.012] WbemLocator:IUnknown:Release (This=0x57a2d08) returned 0x1
	[0192.012] WbemLocator:IUnknown:Release (This=0x57a2d08) returned 0x0
	[0192.012] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.012] IUnknown:Release (This=0x731cc8) returned 0x2
	[0192.012] IUnknown:Release (This=0x731cc8) returned 0x1
	[0192.012] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.012] IUnknown:Release (This=0x731ff8) returned 0x2
	[0192.012] IUnknown:Release (This=0x731ff8) returned 0x1
	[0192.012] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.012] IUnknown:Release (This=0x7324c0) returned 0x2
	[0192.012] IUnknown:Release (This=0x7324c0) returned 0x1
	[0192.012] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.012] IUnknown:Release (This=0x731e60) returned 0x2
	[0192.012] IUnknown:Release (This=0x731e60) returned 0x1
	[0192.012] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.012] IUnknown:Release (This=0x731800) returned 0x2
	[0192.012] IUnknown:Release (This=0x731800) returned 0x1
	[0192.012] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.012] IUnknown:Release (This=0x582b520) returned 0x2
	[0192.012] IUnknown:Release (This=0x582b520) returned 0x1
	[0192.013] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.013] IUnknown:Release (This=0x582c378) returned 0x2
	[0192.013] IUnknown:Release (This=0x582c378) returned 0x1
	[0192.013] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.013] IUnknown:Release (This=0x582b6b8) returned 0x2
	[0192.013] IUnknown:Release (This=0x582b6b8) returned 0x1
	[0192.013] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.013] IUnknown:Release (This=0x582a6c8) returned 0x2
	[0192.013] IUnknown:Release (This=0x582a6c8) returned 0x1
	[0192.013] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.013] IUnknown:Release (This=0x582a9f8) returned 0x2
	[0192.013] IUnknown:Release (This=0x582a9f8) returned 0x1
	[0192.013] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.013] IUnknown:Release (This=0x582a530) returned 0x2
	[0192.013] IUnknown:Release (This=0x582a530) returned 0x1
	[0192.013] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.013] IUnknown:Release (This=0x582b9e8) returned 0x2
	[0192.013] IUnknown:Release (This=0x582b9e8) returned 0x1
	[0192.013] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.013] IUnknown:Release (This=0x582ab90) returned 0x2
	[0192.013] IUnknown:Release (This=0x582ab90) returned 0x1
	[0192.014] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.014] IUnknown:Release (This=0x582b850) returned 0x2
	[0192.014] IUnknown:Release (This=0x582b850) returned 0x1
	[0192.014] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.014] IUnknown:Release (This=0x582bb80) returned 0x2
	[0192.014] IUnknown:Release (This=0x582bb80) returned 0x1
	[0192.014] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.014] IUnknown:Release (This=0x582ad28) returned 0x2
	[0192.014] IUnknown:Release (This=0x582ad28) returned 0x1
	[0192.014] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.014] IUnknown:Release (This=0x582bd18) returned 0x2
	[0192.014] IUnknown:Release (This=0x582bd18) returned 0x1
	[0192.014] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.014] IUnknown:Release (This=0x582beb0) returned 0x2
	[0192.014] IUnknown:Release (This=0x582beb0) returned 0x1
	[0192.014] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.052] IUnknown:Release (This=0x582aec0) returned 0x2
	[0192.052] IUnknown:Release (This=0x582aec0) returned 0x1
	[0192.052] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.052] IUnknown:Release (This=0x582b058) returned 0x2
	[0192.052] IUnknown:Release (This=0x582b058) returned 0x1
	[0192.052] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.052] IUnknown:Release (This=0x582c048) returned 0x2
	[0192.052] IUnknown:Release (This=0x582c048) returned 0x1
	[0192.052] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.052] IUnknown:Release (This=0x582b1f0) returned 0x2
	[0192.052] IUnknown:Release (This=0x582b1f0) returned 0x1
	[0192.052] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.052] IUnknown:Release (This=0x582c1e0) returned 0x2
	[0192.052] IUnknown:Release (This=0x582c1e0) returned 0x1
	[0192.052] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.053] IUnknown:Release (This=0x582a860) returned 0x2
	[0192.053] IUnknown:Release (This=0x582a860) returned 0x1
	[0192.053] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.053] IUnknown:Release (This=0x582b388) returned 0x2
	[0192.053] IUnknown:Release (This=0x582b388) returned 0x1
	[0192.053] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.053] IUnknown:Release (This=0x584a2f0) returned 0x2
	[0192.053] IUnknown:Release (This=0x584a2f0) returned 0x1
	[0192.053] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.053] IUnknown:Release (This=0x584a158) returned 0x2
	[0192.053] IUnknown:Release (This=0x584a158) returned 0x1
	[0192.053] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.053] IUnknown:Release (This=0x5849fc0) returned 0x2
	[0192.053] IUnknown:Release (This=0x5849fc0) returned 0x1
	[0192.053] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.053] IUnknown:Release (This=0x5848ca0) returned 0x2
	[0192.053] IUnknown:Release (This=0x5848ca0) returned 0x1
	[0192.053] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.053] IUnknown:Release (This=0x5849300) returned 0x2
	[0192.053] IUnknown:Release (This=0x5849300) returned 0x1
	[0192.053] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.053] IUnknown:Release (This=0x58484a8) returned 0x2
	[0192.053] IUnknown:Release (This=0x58484a8) returned 0x1
	[0192.053] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.053] IUnknown:Release (This=0x5848640) returned 0x2
	[0192.054] IUnknown:Release (This=0x5848640) returned 0x1
	[0192.054] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.054] IUnknown:Release (This=0x58497c8) returned 0x2
	[0192.054] IUnknown:Release (This=0x58497c8) returned 0x1
	[0192.054] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.054] IUnknown:Release (This=0x5849af8) returned 0x2
	[0192.054] IUnknown:Release (This=0x5849af8) returned 0x1
	[0192.054] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.054] IUnknown:Release (This=0x58487d8) returned 0x2
	[0192.054] IUnknown:Release (This=0x58487d8) returned 0x1
	[0192.054] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.054] IUnknown:Release (This=0x5848970) returned 0x2
	[0192.054] IUnknown:Release (This=0x5848970) returned 0x1
	[0192.054] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.054] IUnknown:Release (This=0x5849630) returned 0x2
	[0192.054] IUnknown:Release (This=0x5849630) returned 0x1
	[0192.054] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.054] IUnknown:Release (This=0x5848b08) returned 0x2
	[0192.054] IUnknown:Release (This=0x5848b08) returned 0x1
	[0192.054] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.054] IUnknown:Release (This=0x5848e38) returned 0x2
	[0192.054] IUnknown:Release (This=0x5848e38) returned 0x1
	[0192.054] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.054] IUnknown:Release (This=0x5848fd0) returned 0x2
	[0192.054] IUnknown:Release (This=0x5848fd0) returned 0x1
	[0192.054] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.054] IUnknown:Release (This=0x5849960) returned 0x2
	[0192.055] IUnknown:Release (This=0x5849960) returned 0x1
	[0192.055] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.055] IUnknown:Release (This=0x5849168) returned 0x2
	[0192.055] IUnknown:Release (This=0x5849168) returned 0x1
	[0192.055] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.055] IUnknown:Release (This=0x5849498) returned 0x2
	[0192.055] IUnknown:Release (This=0x5849498) returned 0x1
	[0192.055] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.055] IUnknown:Release (This=0x5849c90) returned 0x2
	[0192.055] IUnknown:Release (This=0x5849c90) returned 0x1
	[0192.055] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.055] IUnknown:Release (This=0x5849e28) returned 0x2
	[0192.055] IUnknown:Release (This=0x5849e28) returned 0x1
	[0192.055] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.055] IUnknown:Release (This=0x5854648) returned 0x2
	[0192.055] IUnknown:Release (This=0x5854648) returned 0x1
	[0192.055] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.055] IUnknown:Release (This=0x5853658) returned 0x2
	[0192.055] IUnknown:Release (This=0x5853658) returned 0x1
	[0192.055] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.055] IUnknown:Release (This=0x5853e50) returned 0x2
	[0192.055] IUnknown:Release (This=0x5853e50) returned 0x1
	[0192.055] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.055] IUnknown:Release (This=0x5852e60) returned 0x2
	[0192.055] IUnknown:Release (This=0x5852e60) returned 0x1
	[0192.055] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.056] IUnknown:Release (This=0x5853cb8) returned 0x2
	[0192.056] IUnknown:Release (This=0x5853cb8) returned 0x1
	[0192.056] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.056] IUnknown:Release (This=0x5852ff8) returned 0x2
	[0192.056] IUnknown:Release (This=0x5852ff8) returned 0x1
	[0192.056] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.056] IUnknown:Release (This=0x58544b0) returned 0x2
	[0192.056] IUnknown:Release (This=0x58544b0) returned 0x1
	[0192.056] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.056] IUnknown:Release (This=0x5853988) returned 0x2
	[0192.056] IUnknown:Release (This=0x5853988) returned 0x1
	[0192.056] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.056] IUnknown:Release (This=0x58534c0) returned 0x2
	[0192.056] IUnknown:Release (This=0x58534c0) returned 0x1
	[0192.056] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.056] IUnknown:Release (This=0x5854318) returned 0x2
	[0192.056] IUnknown:Release (This=0x5854318) returned 0x1
	[0192.056] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.056] IUnknown:Release (This=0x5853b20) returned 0x2
	[0192.056] IUnknown:Release (This=0x5853b20) returned 0x1
	[0192.056] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.056] IUnknown:Release (This=0x58537f0) returned 0x2
	[0192.056] IUnknown:Release (This=0x58537f0) returned 0x1
	[0192.056] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.056] IUnknown:Release (This=0x5853fe8) returned 0x2
	[0192.056] IUnknown:Release (This=0x5853fe8) returned 0x1
	[0192.057] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.057] IUnknown:Release (This=0x58547e0) returned 0x2
	[0192.057] IUnknown:Release (This=0x58547e0) returned 0x1
	[0192.057] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.057] IUnknown:Release (This=0x5854978) returned 0x2
	[0192.057] IUnknown:Release (This=0x5854978) returned 0x1
	[0192.057] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.057] IUnknown:Release (This=0x5854b10) returned 0x2
	[0192.057] IUnknown:Release (This=0x5854b10) returned 0x1
	[0192.057] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.057] IUnknown:Release (This=0x5854ca8) returned 0x2
	[0192.057] IUnknown:Release (This=0x5854ca8) returned 0x1
	[0192.057] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.057] IUnknown:Release (This=0x5854180) returned 0x2
	[0192.057] IUnknown:Release (This=0x5854180) returned 0x1
	[0192.057] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.057] IUnknown:Release (This=0x5853190) returned 0x2
	[0192.057] IUnknown:Release (This=0x5853190) returned 0x1
	[0192.057] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.057] IUnknown:Release (This=0x5853328) returned 0x2
	[0192.057] IUnknown:Release (This=0x5853328) returned 0x1
	[0192.057] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.057] IUnknown:Release (This=0x58606d8) returned 0x2
	[0192.057] IUnknown:Release (This=0x58606d8) returned 0x1
	[0192.057] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.057] IUnknown:Release (This=0x5860078) returned 0x2
	[0192.058] IUnknown:Release (This=0x5860078) returned 0x1
	[0192.058] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.058] IUnknown:Release (This=0x585f550) returned 0x2
	[0192.058] IUnknown:Release (This=0x585f550) returned 0x1
	[0192.058] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.058] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x1
	[0192.058] WbemLocator:IUnknown:Release (This=0x57a2e68) returned 0x0
	[0192.058] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.058] IUnknown:Release (This=0x585f6e8) returned 0x2
	[0192.058] IUnknown:Release (This=0x585f6e8) returned 0x1
	[0192.058] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.058] IUnknown:Release (This=0x585f880) returned 0x2
	[0192.058] IUnknown:Release (This=0x585f880) returned 0x1
	[0192.058] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.058] IUnknown:Release (This=0x5860870) returned 0x2
	[0192.058] IUnknown:Release (This=0x5860870) returned 0x1
	[0192.058] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.058] IUnknown:Release (This=0x58603a8) returned 0x2
	[0192.058] IUnknown:Release (This=0x58603a8) returned 0x1
	[0192.058] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.058] IUnknown:Release (This=0x585fa18) returned 0x2
	[0192.058] IUnknown:Release (This=0x585fa18) returned 0x1
	[0192.058] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.058] IUnknown:Release (This=0x585fee0) returned 0x2
	[0192.058] IUnknown:Release (This=0x585fee0) returned 0x1
	[0192.059] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.059] IUnknown:Release (This=0x585fbb0) returned 0x2
	[0192.059] IUnknown:Release (This=0x585fbb0) returned 0x1
	[0192.059] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.059] IUnknown:Release (This=0x585f220) returned 0x2
	[0192.059] IUnknown:Release (This=0x585f220) returned 0x1
	[0192.059] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.059] IUnknown:Release (This=0x5860ba0) returned 0x2
	[0192.059] IUnknown:Release (This=0x5860ba0) returned 0x1
	[0192.059] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.059] IUnknown:Release (This=0x585fd48) returned 0x2
	[0192.059] IUnknown:Release (This=0x585fd48) returned 0x1
	[0192.059] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.059] IUnknown:Release (This=0x5860a08) returned 0x2
	[0192.059] IUnknown:Release (This=0x5860a08) returned 0x1
	[0192.059] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.059] IUnknown:Release (This=0x585eef0) returned 0x2
	[0192.059] IUnknown:Release (This=0x585eef0) returned 0x1
	[0192.059] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.059] IUnknown:Release (This=0x585ed58) returned 0x2
	[0192.060] IUnknown:Release (This=0x585ed58) returned 0x1
	[0192.060] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.060] IUnknown:Release (This=0x585f088) returned 0x2
	[0192.060] IUnknown:Release (This=0x585f088) returned 0x1
	[0192.060] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.060] IUnknown:Release (This=0x585f3b8) returned 0x2
	[0192.060] IUnknown:Release (This=0x585f3b8) returned 0x1
	[0192.060] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.060] IUnknown:Release (This=0x5860210) returned 0x2
	[0192.060] IUnknown:Release (This=0x5860210) returned 0x1
	[0192.060] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.060] IUnknown:Release (This=0x58703b0) returned 0x2
	[0192.060] IUnknown:Release (This=0x58703b0) returned 0x1
	[0192.060] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.060] IUnknown:Release (This=0x586fd50) returned 0x2
	[0192.060] IUnknown:Release (This=0x586fd50) returned 0x1
	[0192.060] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.060] IUnknown:Release (This=0x586f3c0) returned 0x2
	[0192.060] IUnknown:Release (This=0x586f3c0) returned 0x1
	[0192.060] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.060] IUnknown:Release (This=0x586f090) returned 0x2
	[0192.060] IUnknown:Release (This=0x586f090) returned 0x1
	[0192.060] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.060] IUnknown:Release (This=0x586fee8) returned 0x2
	[0192.060] IUnknown:Release (This=0x586fee8) returned 0x1
	[0192.060] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.061] IUnknown:Release (This=0x586f558) returned 0x2
	[0192.061] IUnknown:Release (This=0x586f558) returned 0x1
	[0192.061] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.061] IUnknown:Release (This=0x586f6f0) returned 0x2
	[0192.061] IUnknown:Release (This=0x586f6f0) returned 0x1
	[0192.061] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.061] IUnknown:Release (This=0x586f228) returned 0x2
	[0192.061] IUnknown:Release (This=0x586f228) returned 0x1
	[0192.061] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.061] IUnknown:Release (This=0x5870080) returned 0x2
	[0192.061] IUnknown:Release (This=0x5870080) returned 0x1
	[0192.061] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.061] IUnknown:Release (This=0x586f888) returned 0x2
	[0192.061] IUnknown:Release (This=0x586f888) returned 0x1
	[0192.061] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.061] IUnknown:Release (This=0x5870218) returned 0x2
	[0192.061] IUnknown:Release (This=0x5870218) returned 0x1
	[0192.061] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.061] IUnknown:Release (This=0x586fa20) returned 0x2
	[0192.061] IUnknown:Release (This=0x586fa20) returned 0x1
	[0192.061] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.062] IUnknown:Release (This=0x586fbb8) returned 0x2
	[0192.062] IUnknown:Release (This=0x586fbb8) returned 0x1
	[0192.062] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.062] IUnknown:Release (This=0x58706e0) returned 0x2
	[0192.062] IUnknown:Release (This=0x58706e0) returned 0x1
	[0192.062] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.062] IUnknown:Release (This=0x5870548) returned 0x2
	[0192.062] IUnknown:Release (This=0x5870548) returned 0x1
	[0192.062] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.062] IUnknown:Release (This=0x586eef8) returned 0x2
	[0192.062] IUnknown:Release (This=0x586eef8) returned 0x1
	[0192.062] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.062] IUnknown:Release (This=0x5870878) returned 0x2
	[0192.062] IUnknown:Release (This=0x5870878) returned 0x1
	[0192.062] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.062] IUnknown:Release (This=0x5870a10) returned 0x2
	[0192.062] IUnknown:Release (This=0x5870a10) returned 0x1
	[0192.062] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.062] IUnknown:Release (This=0x5870ba8) returned 0x2
	[0192.062] IUnknown:Release (This=0x5870ba8) returned 0x1
	[0192.062] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.062] IUnknown:Release (This=0x586ed60) returned 0x2
	[0192.062] IUnknown:Release (This=0x586ed60) returned 0x1
	[0192.062] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.062] IUnknown:Release (This=0x5882580) returned 0x2
	[0192.063] IUnknown:Release (This=0x5882580) returned 0x1
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] IUnknown:Release (This=0x5882be0) returned 0x2
	[0192.063] IUnknown:Release (This=0x5882be0) returned 0x1
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] IUnknown:Release (This=0x5881728) returned 0x2
	[0192.063] IUnknown:Release (This=0x5881728) returned 0x1
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] IUnknown:Release (This=0x5882718) returned 0x2
	[0192.063] IUnknown:Release (This=0x5882718) returned 0x1
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] IUnknown:Release (This=0x5882d78) returned 0x2
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.063] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.064] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.065] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] WbemLocator:IUnknown:Release (This=0x57a2dd8) returned 0x1
	[0192.066] WbemLocator:IUnknown:Release (This=0x57a2dd8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] WbemLocator:IUnknown:Release (This=0x57a3008) returned 0x1
	[0192.066] WbemLocator:IUnknown:Release (This=0x57a3008) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] WbemLocator:IUnknown:Release (This=0x57a2ff8) returned 0x1
	[0192.066] WbemLocator:IUnknown:Release (This=0x57a2ff8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fc30 | out: pToken=0xe8fc30) returned 0x0
	[0192.066] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.067] WbemDefPath:IUnknown:Release (This=0x703680) returned 0x1
	[0192.067] WbemDefPath:IUnknown:Release (This=0x703680) returned 0x0
	[0192.067] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.067] WbemDefPath:IUnknown:Release (This=0x703bc0) returned 0x1
	[0192.067] WbemDefPath:IUnknown:Release (This=0x703bc0) returned 0x0
	[0192.067] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.067] WbemDefPath:IUnknown:Release (This=0x703840) returned 0x1
	[0192.067] WbemDefPath:IUnknown:Release (This=0x703840) returned 0x0
	[0192.067] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.067] WbemDefPath:IUnknown:Release (This=0x57abfe8) returned 0x1
	[0192.067] WbemDefPath:IUnknown:Release (This=0x57abfe8) returned 0x0
	[0192.067] CoGetContextToken (in: pToken=0xe8fbb8 | out: pToken=0xe8fbb8) returned 0x0
	[0192.067] WbemDefPath:IUnknown:Release (This=0x57ac3d8) returned 0x1
	[0192.067] WbemDefPath:IUnknown:Release (This=0x57ac3d8) returned 0x0
	[0192.067] IUnknown:Release (This=0x5860210) returned 0x0
	[0192.067] IUnknown:Release (This=0x585f3b8) returned 0x0
	[0192.068] IUnknown:Release (This=0x585f088) returned 0x0
	[0192.068] IUnknown:Release (This=0x585ed58) returned 0x0
	[0192.068] IUnknown:Release (This=0x585eef0) returned 0x0
	[0192.068] IUnknown:Release (This=0x5860a08) returned 0x0
	[0192.068] IUnknown:Release (This=0x585fd48) returned 0x0
	[0192.068] IUnknown:Release (This=0x5860ba0) returned 0x0
	[0192.069] IUnknown:Release (This=0x585f220) returned 0x0
	[0192.070] IUnknown:Release (This=0x585fbb0) returned 0x0
	[0192.070] IUnknown:Release (This=0x585fee0) returned 0x0
	[0192.070] IUnknown:Release (This=0x585fa18) returned 0x0
	[0192.071] IUnknown:Release (This=0x58603a8) returned 0x0
	[0192.071] IUnknown:Release (This=0x5860870) returned 0x0
	[0192.071] IUnknown:Release (This=0x585f880) returned 0x0
	[0192.071] IUnknown:Release (This=0x585f6e8) returned 0x0
	[0192.071] IUnknown:Release (This=0x5de00a8) returned 0x0
	[0192.071] IUnknown:Release (This=0x5de0708) returned 0x0
	[0192.072] IUnknown:Release (This=0x585f550) returned 0x0
	[0192.072] IUnknown:Release (This=0x5860078) returned 0x0
	[0192.072] IUnknown:Release (This=0x58606d8) returned 0x0
	[0192.072] IUnknown:Release (This=0x5853328) returned 0x0
	[0192.072] IUnknown:Release (This=0x5853190) returned 0x0
	[0192.072] IUnknown:Release (This=0x5854180) returned 0x0
	[0192.073] IUnknown:Release (This=0x5854ca8) returned 0x0
	[0192.073] IUnknown:Release (This=0x5854b10) returned 0x0
	[0192.073] IUnknown:Release (This=0x5854978) returned 0x0
	[0192.073] IUnknown:Release (This=0x58547e0) returned 0x0
	[0192.073] IUnknown:Release (This=0x5853fe8) returned 0x0
	[0192.074] IUnknown:Release (This=0x58537f0) returned 0x0
	[0192.074] IUnknown:Release (This=0x5853b20) returned 0x0
	[0192.074] IUnknown:Release (This=0x5854318) returned 0x0
	[0192.074] IUnknown:Release (This=0x58534c0) returned 0x0
	[0192.074] IUnknown:Release (This=0x5853988) returned 0x0
	[0192.074] IUnknown:Release (This=0x58544b0) returned 0x0
	[0192.074] IUnknown:Release (This=0x5852ff8) returned 0x0
	[0192.075] IUnknown:Release (This=0x5853cb8) returned 0x0
	[0192.075] IUnknown:Release (This=0x5852e60) returned 0x0
	[0192.075] IUnknown:Release (This=0x5853e50) returned 0x0
	[0192.075] IUnknown:Release (This=0x5853658) returned 0x0
	[0192.075] IUnknown:Release (This=0x5854648) returned 0x0
	[0192.075] IUnknown:Release (This=0x5849e28) returned 0x0
	[0192.076] IUnknown:Release (This=0x5849c90) returned 0x0
	[0192.076] IUnknown:Release (This=0x5849498) returned 0x0
	[0192.076] IUnknown:Release (This=0x5849168) returned 0x0
	[0192.076] IUnknown:Release (This=0x5849960) returned 0x0
	[0192.076] IUnknown:Release (This=0x5848fd0) returned 0x0
	[0192.076] IUnknown:Release (This=0x5848e38) returned 0x0
	[0192.077] IUnknown:Release (This=0x5848b08) returned 0x0
	[0192.077] IUnknown:Release (This=0x5849630) returned 0x0
	[0192.077] IUnknown:Release (This=0x5848970) returned 0x0
	[0192.077] IUnknown:Release (This=0x58487d8) returned 0x0
	[0192.077] IUnknown:Release (This=0x5849af8) returned 0x0
	[0192.077] IUnknown:Release (This=0x58497c8) returned 0x0
	[0192.078] IUnknown:Release (This=0x5848640) returned 0x0
	[0192.078] IUnknown:Release (This=0x58484a8) returned 0x0
	[0192.078] IUnknown:Release (This=0x5849300) returned 0x0
	[0192.078] IUnknown:Release (This=0x5848ca0) returned 0x0
	[0192.078] IUnknown:Release (This=0x5849fc0) returned 0x0
	[0192.078] IUnknown:Release (This=0x584a158) returned 0x0
	[0192.078] IUnknown:Release (This=0x584a2f0) returned 0x0
	[0192.079] IUnknown:Release (This=0x582b388) returned 0x0
	[0192.079] IUnknown:Release (This=0x582a860) returned 0x0
	[0192.079] IUnknown:Release (This=0x582c1e0) returned 0x0
	[0192.079] IUnknown:Release (This=0x582b1f0) returned 0x0
	[0192.079] IUnknown:Release (This=0x582c048) returned 0x0
	[0192.080] IUnknown:Release (This=0x582b058) returned 0x0
	[0192.080] IUnknown:Release (This=0x582aec0) returned 0x0
	[0192.080] IUnknown:Release (This=0x582beb0) returned 0x0
	[0192.080] IUnknown:Release (This=0x582bd18) returned 0x0
	[0192.080] IUnknown:Release (This=0x582ad28) returned 0x0
	[0192.081] IUnknown:Release (This=0x582bb80) returned 0x0
	[0192.081] IUnknown:Release (This=0x582b850) returned 0x0
	[0192.081] IUnknown:Release (This=0x582ab90) returned 0x0
	[0192.081] IUnknown:Release (This=0x582b9e8) returned 0x0
	[0192.082] IUnknown:Release (This=0x582a530) returned 0x0
	[0192.082] IUnknown:Release (This=0x582a9f8) returned 0x0
	[0192.082] IUnknown:Release (This=0x582a6c8) returned 0x0
	[0192.082] IUnknown:Release (This=0x582b6b8) returned 0x0
	[0192.082] IUnknown:Release (This=0x582c378) returned 0x0
	[0192.082] IUnknown:Release (This=0x582b520) returned 0x0
	[0192.083] IUnknown:Release (This=0x731800) returned 0x0
	[0192.083] IUnknown:Release (This=0x731e60) returned 0x0
	[0192.083] IUnknown:Release (This=0x7324c0) returned 0x0
	[0192.083] IUnknown:Release (This=0x731ff8) returned 0x0
	[0192.083] IUnknown:Release (This=0x731cc8) returned 0x0
	[0192.083] IUnknown:Release (This=0x732190) returned 0x0
	[0192.084] IUnknown:Release (This=0x731b30) returned 0x0
	[0192.084] IUnknown:Release (This=0x583a730) returned 0x0
	[0192.084] IUnknown:Release (This=0x583a2a8) returned 0x0
	[0192.084] IUnknown:Release (This=0x5830198) returned 0x0
	[0192.084] IUnknown:Release (This=0x5839648) returned 0x0
	[0192.084] IUnknown:Release (This=0x5830000) returned 0x0
	[0192.085] IUnknown:Release (This=0x5793e08) returned 0x0
	[0192.085] IUnknown:Release (This=0x5793c70) returned 0x0
	[0192.085] IUnknown:Release (This=0x5793318) returned 0x0
	[0192.085] IUnknown:Release (This=0x5825f48) returned 0x0
	[0192.085] IUnknown:Release (This=0x5825ae8) returned 0x0
	[0192.085] IUnknown:Release (This=0x5825228) returned 0x0
	[0192.085] IUnknown:Release (This=0x78eb70) returned 0x0
	[0192.086] IUnknown:Release (This=0x6adb58) returned 0x0
	[0192.086] IUnknown:Release (This=0x57b7330) returned 0x0
	[0192.090] IUnknown:Release (This=0x5de0a38) returned 0x0
	[0192.091] IUnknown:Release (This=0x5de1560) returned 0x0
	[0192.091] IUnknown:Release (This=0x5ddff10) returned 0x0
	[0192.091] IUnknown:Release (This=0x5de0d68) returned 0x0
	[0192.091] IUnknown:Release (This=0x5ddfd78) returned 0x0
	[0192.092] IUnknown:Release (This=0x5ddfbe0) returned 0x0
	[0192.092] IUnknown:Release (This=0x5ddfa48) returned 0x0
	[0192.092] IUnknown:Release (This=0x5de0570) returned 0x0
	[0192.092] IUnknown:Release (This=0x5de0240) returned 0x0
	[0192.092] IUnknown:Release (This=0x588b680) returned 0x0
	[0192.092] IUnknown:Release (This=0x588acf0) returned 0x0
	[0192.093] IUnknown:Release (This=0x588ab58) returned 0x0
	[0192.093] IUnknown:Release (This=0x588b4e8) returned 0x0
	[0192.093] IUnknown:Release (This=0x588c4d8) returned 0x0
	[0192.093] IUnknown:Release (This=0x588a9c0) returned 0x0
	[0192.093] IUnknown:Release (This=0x588c340) returned 0x0
	[0192.093] IUnknown:Release (This=0x588c1a8) returned 0x0
	[0192.093] IUnknown:Release (This=0x588bce0) returned 0x0
	[0192.094] IUnknown:Release (This=0x588c670) returned 0x0
	[0192.094] IUnknown:Release (This=0x588b350) returned 0x0
	[0192.094] IUnknown:Release (This=0x588bb48) returned 0x0
	[0192.094] IUnknown:Release (This=0x588b9b0) returned 0x0
	[0192.094] IUnknown:Release (This=0x588a828) returned 0x0
	[0192.094] IUnknown:Release (This=0x588be78) returned 0x0
	[0192.094] IUnknown:Release (This=0x588c010) returned 0x0
	[0192.094] IUnknown:Release (This=0x588b1b8) returned 0x0
	[0192.094] IUnknown:Release (This=0x588b020) returned 0x0
	[0192.094] IUnknown:Release (This=0x588ae88) returned 0x0
	[0192.095] IUnknown:Release (This=0x588b818) returned 0x0
	[0192.095] IUnknown:Release (This=0x5882250) returned 0x0
	[0192.095] IUnknown:Release (This=0x58820b8) returned 0x0
	[0192.095] IUnknown:Release (This=0x5881f20) returned 0x0
	[0192.095] IUnknown:Release (This=0x5881d88) returned 0x0
	[0192.095] IUnknown:Release (This=0x5881bf0) returned 0x0
	[0192.095] IUnknown:Release (This=0x5881a58) returned 0x0
	[0192.095] IUnknown:Release (This=0x58833d8) returned 0x0
	[0192.095] IUnknown:Release (This=0x58818c0) returned 0x0
	[0192.095] IUnknown:Release (This=0x5883240) returned 0x0
	[0192.095] IUnknown:Release (This=0x58830a8) returned 0x0
	[0192.095] IUnknown:Release (This=0x5882a48) returned 0x0
	[0192.095] IUnknown:Release (This=0x5882f10) returned 0x0
	[0192.095] IUnknown:Release (This=0x58823e8) returned 0x0
	[0192.095] IUnknown:Release (This=0x58828b0) returned 0x0
	[0192.095] IUnknown:Release (This=0x5881590) returned 0x0
	[0192.095] IUnknown:Release (This=0x5882d78) returned 0x0
	[0192.095] IUnknown:Release (This=0x5882718) returned 0x0
	[0192.095] IUnknown:Release (This=0x5881728) returned 0x0
	[0192.095] IUnknown:Release (This=0x5882be0) returned 0x0
	[0192.095] IUnknown:Release (This=0x5882580) returned 0x0
	[0192.095] IUnknown:Release (This=0x586ed60) returned 0x0
	[0192.096] IUnknown:Release (This=0x5870ba8) returned 0x0
	[0192.096] IUnknown:Release (This=0x5870a10) returned 0x0
	[0192.096] IUnknown:Release (This=0x5870878) returned 0x0
	[0192.096] IUnknown:Release (This=0x586eef8) returned 0x0
	[0192.096] IUnknown:Release (This=0x5870548) returned 0x0
	[0192.096] IUnknown:Release (This=0x58706e0) returned 0x0
	[0192.096] IUnknown:Release (This=0x586fbb8) returned 0x0
	[0192.096] IUnknown:Release (This=0x586fa20) returned 0x0
	[0192.096] IUnknown:Release (This=0x5870218) returned 0x0
	[0192.096] IUnknown:Release (This=0x586f888) returned 0x0
	[0192.096] IUnknown:Release (This=0x5870080) returned 0x0
	[0192.096] IUnknown:Release (This=0x586f228) returned 0x0
	[0192.096] IUnknown:Release (This=0x586f6f0) returned 0x0
	[0192.096] IUnknown:Release (This=0x586f558) returned 0x0
	[0192.096] IUnknown:Release (This=0x586fee8) returned 0x0
	[0192.096] IUnknown:Release (This=0x586f090) returned 0x0
	[0192.096] IUnknown:Release (This=0x586f3c0) returned 0x0
	[0192.096] IUnknown:Release (This=0x586fd50) returned 0x0
	[0192.096] IUnknown:Release (This=0x58703b0) returned 0x0
	[0192.102] RegCloseKey (hKey=0x66c) returned 0x0
	[0192.102] RegCloseKey (hKey=0x288) returned 0x0
	[0194.416] EtwEventUnregister (RegHandle=0x6a0b20) returned 0x0
	[0194.417] EtwEventUnregister (RegHandle=0x6f2820) returned 0x0
	[0194.420] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3f0
	[0194.420] PostMessageW (hWnd=0x3021a, Msg=0x12, wParam=0x0, lParam=0x0) returned 1
	[0194.422] CoGetContextToken (in: pToken=0xe8f80c | out: pToken=0xe8f80c) returned 0x0
	[0194.422] IUnknown:QueryInterface (in: This=0x6d0ad8, riid=0x6bbd4564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xe8f830 | out: ppvObject=0xe8f830*=0x6d0ae4) returned 0x0
	[0194.422] IComThreadingInfo:GetCurrentThreadType (in: This=0x6d0ae4, pThreadType=0xe8f85c | out: pThreadType=0xe8f85c*=0) returned 0x0
	[0194.422] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0194.434] CoGetContextToken (in: pToken=0xe8f824 | out: pToken=0xe8f824) returned 0x0
	[0194.434] IUnknown:QueryInterface (in: This=0x6d0ad8, riid=0x6bbd4564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xe8f848 | out: ppvObject=0xe8f848*=0x6d0ae4) returned 0x0
	[0194.434] IComThreadingInfo:GetCurrentThreadType (in: This=0x6d0ae4, pThreadType=0xe8f874 | out: pThreadType=0xe8f874*=0) returned 0x0
	[0194.434] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0194.524] CloseHandle (hObject=0x284) returned 1
	[0194.527] EtwEventUnregister (RegHandle=0x6f3860) returned 0x0
	[0194.529] RegCloseKey (hKey=0x380) returned 0x0
	[0194.530] CloseHandle (hObject=0x37c) returned 1
	[0194.530] RegCloseKey (hKey=0x378) returned 0x0
	[0194.530] RegCloseKey (hKey=0x374) returned 0x0
	[0194.531] CloseHandle (hObject=0x35c) returned 1
	[0194.531] setsockopt (s=0x350, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0194.531] closesocket (s=0x350) returned 0
	[0194.532] CloseHandle (hObject=0x354) returned 1
	[0194.532] setsockopt (s=0x498, level=65535, optname=128, optval="\x01", optlen=4) returned 0
	[0194.533] closesocket (s=0x498) returned 0
	[0194.534] setsockopt (s=0x348, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0194.534] closesocket (s=0x348) returned 0
	[0194.535] CloseHandle (hObject=0x34c) returned 1
	[0194.536] RegCloseKey (hKey=0x80000004) returned 0x0
	[0194.536] setsockopt (s=0x490, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0194.536] closesocket (s=0x490) returned 0
	[0194.537] CloseHandle (hObject=0x494) returned 1
	[0194.537] setsockopt (s=0x488, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0194.537] closesocket (s=0x488) returned 0
	[0194.537] CloseHandle (hObject=0x48c) returned 1
	[0194.538] CloseHandle (hObject=0x484) returned 1
	[0194.538] UnmapViewOfFile (lpBaseAddress=0x5400000) returned 1
	[0194.538] CloseHandle (hObject=0x3f0) returned 1
	[0194.539] setsockopt (s=0x4e4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
	[0194.539] closesocket (s=0x4e4) returned 0
	[0194.540] WinHttpCloseHandle (hInternet=0x747070) returned 1
	[0194.541] CloseHandle (hObject=0x640) returned 1
	[0194.542] FreeCredentialsHandle (phCredential=0x275397c) returned 0x0
	[0194.543] DeleteSecurityContext (phContext=0x2753b24) returned 0x0
	[0194.545] CloseHandle (hObject=0x668) returned 1
	[0194.545] CloseHandle (hObject=0x390) returned 1
	[0194.545] CloseHandle (hObject=0x38c) returned 1
	[0194.546] RegCloseKey (hKey=0x388) returned 0x0
	[0194.546] CloseHandle (hObject=0x384) returned 1
	[0194.549] CoGetContextToken (in: pToken=0xe8f878 | out: pToken=0xe8f878) returned 0x0
	[0194.549] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.549] WbemDefPath:IUnknown:Release (This=0x5876748) returned 0x1
	[0194.549] WbemDefPath:IUnknown:Release (This=0x5876748) returned 0x0
	[0194.550] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.550] WbemDefPath:IUnknown:Release (This=0x588dc30) returned 0x1
	[0194.550] WbemDefPath:IUnknown:Release (This=0x588dc30) returned 0x0
	[0194.550] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.550] WbemDefPath:IUnknown:Release (This=0x58455a8) returned 0x1
	[0194.550] WbemDefPath:IUnknown:Release (This=0x58455a8) returned 0x0
	[0194.550] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.550] WbemDefPath:IUnknown:Release (This=0x588e5d0) returned 0x1
	[0194.550] WbemDefPath:IUnknown:Release (This=0x588e5d0) returned 0x0
	[0194.550] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.550] WbemDefPath:IUnknown:Release (This=0x585b9c8) returned 0x1
	[0194.551] WbemDefPath:IUnknown:Release (This=0x585b9c8) returned 0x0
	[0194.551] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.551] WbemDefPath:IUnknown:Release (This=0x588dfb0) returned 0x1
	[0194.551] WbemDefPath:IUnknown:Release (This=0x588dfb0) returned 0x0
	[0194.551] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.551] WbemDefPath:IUnknown:Release (This=0x585b3a8) returned 0x1
	[0194.551] WbemDefPath:IUnknown:Release (This=0x585b3a8) returned 0x0
	[0194.551] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.551] WbemDefPath:IUnknown:Release (This=0x5877158) returned 0x1
	[0194.551] WbemDefPath:IUnknown:Release (This=0x5877158) returned 0x0
	[0194.551] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.551] WbemDefPath:IUnknown:Release (This=0x57ac138) returned 0x1
	[0194.552] WbemDefPath:IUnknown:Release (This=0x57ac138) returned 0x0
	[0194.552] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.552] WbemDefPath:IUnknown:Release (This=0x5876b38) returned 0x1
	[0194.552] WbemDefPath:IUnknown:Release (This=0x5876b38) returned 0x0
	[0194.552] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.552] WbemDefPath:IUnknown:Release (This=0x5876518) returned 0x1
	[0194.552] WbemDefPath:IUnknown:Release (This=0x5876518) returned 0x0
	[0194.552] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.552] WbemDefPath:IUnknown:Release (This=0x585bfe8) returned 0x1
	[0194.552] WbemDefPath:IUnknown:Release (This=0x585bfe8) returned 0x0
	[0194.552] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.552] WbemDefPath:IUnknown:Release (This=0x588e330) returned 0x1
	[0194.552] WbemDefPath:IUnknown:Release (This=0x588e330) returned 0x0
	[0194.553] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.553] WbemDefPath:IUnknown:Release (This=0x5845fb8) returned 0x1
	[0194.553] WbemDefPath:IUnknown:Release (This=0x5845fb8) returned 0x0
	[0194.553] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.553] WbemDefPath:IUnknown:Release (This=0x5845998) returned 0x1
	[0194.553] WbemDefPath:IUnknown:Release (This=0x5845998) returned 0x0
	[0194.553] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.553] WbemDefPath:IUnknown:Release (This=0x5845378) returned 0x1
	[0194.553] WbemDefPath:IUnknown:Release (This=0x5845378) returned 0x0
	[0194.553] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.553] WbemDefPath:IUnknown:Release (This=0x585bdb8) returned 0x1
	[0194.553] WbemDefPath:IUnknown:Release (This=0x585bdb8) returned 0x0
	[0194.554] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.554] WbemDefPath:IUnknown:Release (This=0x585b798) returned 0x1
	[0194.554] WbemDefPath:IUnknown:Release (This=0x585b798) returned 0x0
	[0194.554] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.554] WbemDefPath:IUnknown:Release (This=0x57acb48) returned 0x1
	[0194.554] WbemDefPath:IUnknown:Release (This=0x57acb48) returned 0x0
	[0194.554] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.554] WbemDefPath:IUnknown:Release (This=0x585b178) returned 0x1
	[0194.554] WbemDefPath:IUnknown:Release (This=0x585b178) returned 0x0
	[0194.554] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.554] WbemDefPath:IUnknown:Release (This=0x5876f28) returned 0x1
	[0194.554] WbemDefPath:IUnknown:Release (This=0x5876f28) returned 0x0
	[0194.555] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.555] WbemDefPath:IUnknown:Release (This=0x5845d88) returned 0x1
	[0194.555] WbemDefPath:IUnknown:Release (This=0x5845d88) returned 0x0
	[0194.555] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.555] WbemDefPath:IUnknown:Release (This=0x5845768) returned 0x1
	[0194.555] WbemDefPath:IUnknown:Release (This=0x5845768) returned 0x0
	[0194.555] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.555] WbemDefPath:IUnknown:Release (This=0x5845148) returned 0x1
	[0194.555] WbemDefPath:IUnknown:Release (This=0x5845148) returned 0x0
	[0194.555] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.555] WbemDefPath:IUnknown:Release (This=0x585bb88) returned 0x1
	[0194.555] WbemDefPath:IUnknown:Release (This=0x585bb88) returned 0x0
	[0194.556] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.556] WbemDefPath:IUnknown:Release (This=0x588e170) returned 0x1
	[0194.556] WbemDefPath:IUnknown:Release (This=0x588e170) returned 0x0
	[0194.556] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.556] WbemDefPath:IUnknown:Release (This=0x585b568) returned 0x1
	[0194.556] WbemDefPath:IUnknown:Release (This=0x585b568) returned 0x0
	[0194.556] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.556] WbemDefPath:IUnknown:Release (This=0x57ac918) returned 0x1
	[0194.556] WbemDefPath:IUnknown:Release (This=0x57ac918) returned 0x0
	[0194.556] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.556] WbemDefPath:IUnknown:Release (This=0x588db50) returned 0x1
	[0194.556] WbemDefPath:IUnknown:Release (This=0x588db50) returned 0x0
	[0194.556] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.556] WbemDefPath:IUnknown:Release (This=0x57ac2f8) returned 0x1
	[0194.556] WbemDefPath:IUnknown:Release (This=0x57ac2f8) returned 0x0
	[0194.557] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.557] WbemDefPath:IUnknown:Release (This=0x5876cf8) returned 0x1
	[0194.557] WbemDefPath:IUnknown:Release (This=0x5876cf8) returned 0x0
	[0194.557] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.557] WbemDefPath:IUnknown:Release (This=0x58766d8) returned 0x1
	[0194.557] WbemDefPath:IUnknown:Release (This=0x58766d8) returned 0x0
	[0194.558] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.558] WbemDefPath:IUnknown:Release (This=0x588dbc0) returned 0x1
	[0194.558] WbemDefPath:IUnknown:Release (This=0x588dbc0) returned 0x0
	[0194.558] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.558] WbemDefPath:IUnknown:Release (This=0x5845b58) returned 0x1
	[0194.558] WbemDefPath:IUnknown:Release (This=0x5845b58) returned 0x0
	[0194.558] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.558] WbemDefPath:IUnknown:Release (This=0x585baa8) returned 0x1
	[0194.558] WbemDefPath:IUnknown:Release (This=0x585baa8) returned 0x0
	[0194.558] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.558] WbemDefPath:IUnknown:Release (This=0x5845538) returned 0x1
	[0194.558] WbemDefPath:IUnknown:Release (This=0x5845538) returned 0x0
	[0194.558] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.558] WbemDefPath:IUnknown:Release (This=0x585bf78) returned 0x1
	[0194.558] WbemDefPath:IUnknown:Release (This=0x585bf78) returned 0x0
	[0194.559] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.559] WbemDefPath:IUnknown:Release (This=0x5876eb8) returned 0x1
	[0194.559] WbemDefPath:IUnknown:Release (This=0x5876eb8) returned 0x0
	[0194.559] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.559] WbemDefPath:IUnknown:Release (This=0x588e560) returned 0x1
	[0194.559] WbemDefPath:IUnknown:Release (This=0x588e560) returned 0x0
	[0194.559] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.559] WbemDefPath:IUnknown:Release (This=0x585b958) returned 0x1
	[0194.559] WbemDefPath:IUnknown:Release (This=0x585b958) returned 0x0
	[0194.559] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.559] WbemDefPath:IUnknown:Release (This=0x57acd08) returned 0x1
	[0194.559] WbemDefPath:IUnknown:Release (This=0x57acd08) returned 0x0
	[0194.560] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.560] WbemDefPath:IUnknown:Release (This=0x588df40) returned 0x1
	[0194.560] WbemDefPath:IUnknown:Release (This=0x588df40) returned 0x0
	[0194.560] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.560] WbemDefPath:IUnknown:Release (This=0x585b338) returned 0x1
	[0194.560] WbemDefPath:IUnknown:Release (This=0x585b338) returned 0x0
	[0194.560] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.560] WbemDefPath:IUnknown:Release (This=0x57ac6e8) returned 0x1
	[0194.560] WbemDefPath:IUnknown:Release (This=0x57ac6e8) returned 0x0
	[0194.560] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.560] WbemDefPath:IUnknown:Release (This=0x58770e8) returned 0x1
	[0194.560] WbemDefPath:IUnknown:Release (This=0x58770e8) returned 0x0
	[0194.560] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.560] WbemDefPath:IUnknown:Release (This=0x588d920) returned 0x1
	[0194.560] WbemDefPath:IUnknown:Release (This=0x588d920) returned 0x0
	[0194.561] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.561] WbemDefPath:IUnknown:Release (This=0x57ac0c8) returned 0x1
	[0194.561] WbemDefPath:IUnknown:Release (This=0x57ac0c8) returned 0x0
	[0194.561] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.561] WbemDefPath:IUnknown:Release (This=0x5876ac8) returned 0x1
	[0194.561] WbemDefPath:IUnknown:Release (This=0x5876ac8) returned 0x0
	[0194.561] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.561] WbemDefPath:IUnknown:Release (This=0x58764a8) returned 0x1
	[0194.561] WbemDefPath:IUnknown:Release (This=0x58764a8) returned 0x0
	[0194.561] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.561] WbemDefPath:IUnknown:Release (This=0x5845f48) returned 0x1
	[0194.561] WbemDefPath:IUnknown:Release (This=0x5845f48) returned 0x0
	[0194.561] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.561] WbemDefPath:IUnknown:Release (This=0x5845308) returned 0x1
	[0194.561] WbemDefPath:IUnknown:Release (This=0x5845308) returned 0x0
	[0194.562] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.562] WbemDefPath:IUnknown:Release (This=0x585bd48) returned 0x1
	[0194.562] WbemDefPath:IUnknown:Release (This=0x585bd48) returned 0x0
	[0194.562] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.562] WbemDefPath:IUnknown:Release (This=0x5876898) returned 0x1
	[0194.562] WbemDefPath:IUnknown:Release (This=0x5876898) returned 0x0
	[0194.562] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.562] WbemDefPath:IUnknown:Release (This=0x585b728) returned 0x1
	[0194.562] WbemDefPath:IUnknown:Release (This=0x585b728) returned 0x0
	[0194.562] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.562] WbemDefPath:IUnknown:Release (This=0x588dd10) returned 0x1
	[0194.562] WbemDefPath:IUnknown:Release (This=0x588dd10) returned 0x0
	[0194.562] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.562] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x1
	[0194.562] WbemDefPath:IUnknown:Release (This=0x57acad8) returned 0x0
	[0194.563] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.563] WbemDefPath:IUnknown:Release (This=0x585b108) returned 0x1
	[0194.563] WbemDefPath:IUnknown:Release (This=0x585b108) returned 0x0
	[0194.563] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.563] WbemDefPath:IUnknown:Release (This=0x588e2c0) returned 0x1
	[0194.563] WbemDefPath:IUnknown:Release (This=0x588e2c0) returned 0x0
	[0194.563] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.563] WbemDefPath:IUnknown:Release (This=0x57ac4b8) returned 0x1
	[0194.563] WbemDefPath:IUnknown:Release (This=0x57ac4b8) returned 0x0
	[0194.563] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.563] WbemDefPath:IUnknown:Release (This=0x588e090) returned 0x1
	[0194.563] WbemDefPath:IUnknown:Release (This=0x588e090) returned 0x0
	[0194.563] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.563] WbemDefPath:IUnknown:Release (This=0x5845d18) returned 0x1
	[0194.563] WbemDefPath:IUnknown:Release (This=0x5845d18) returned 0x0
	[0194.564] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.564] WbemDefPath:IUnknown:Release (This=0x588d990) returned 0x1
	[0194.564] WbemDefPath:IUnknown:Release (This=0x588d990) returned 0x0
	[0194.564] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.564] WbemDefPath:IUnknown:Release (This=0x58456f8) returned 0x1
	[0194.564] WbemDefPath:IUnknown:Release (This=0x58456f8) returned 0x0
	[0194.564] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.564] WbemDefPath:IUnknown:Release (This=0x588e100) returned 0x1
	[0194.564] WbemDefPath:IUnknown:Release (This=0x588e100) returned 0x0
	[0194.565] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.565] WbemDefPath:IUnknown:Release (This=0x5845bc8) returned 0x1
	[0194.565] WbemDefPath:IUnknown:Release (This=0x5845bc8) returned 0x0
	[0194.566] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.566] WbemDefPath:IUnknown:Release (This=0x58450d8) returned 0x1
	[0194.566] WbemDefPath:IUnknown:Release (This=0x58450d8) returned 0x0
	[0194.566] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.566] WbemDefPath:IUnknown:Release (This=0x585bb18) returned 0x1
	[0194.566] WbemDefPath:IUnknown:Release (This=0x585bb18) returned 0x0
	[0194.566] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.566] WbemDefPath:IUnknown:Release (This=0x585b4f8) returned 0x1
	[0194.566] WbemDefPath:IUnknown:Release (This=0x585b4f8) returned 0x0
	[0194.566] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.566] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x1
	[0194.566] WbemDefPath:IUnknown:Release (This=0x57ac8a8) returned 0x0
	[0194.566] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.567] WbemDefPath:IUnknown:Release (This=0x58772a8) returned 0x1
	[0194.567] WbemDefPath:IUnknown:Release (This=0x58772a8) returned 0x0
	[0194.567] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.567] WbemDefPath:IUnknown:Release (This=0x588ddf0) returned 0x1
	[0194.567] WbemDefPath:IUnknown:Release (This=0x588ddf0) returned 0x0
	[0194.567] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.567] WbemDefPath:IUnknown:Release (This=0x585b258) returned 0x1
	[0194.567] WbemDefPath:IUnknown:Release (This=0x585b258) returned 0x0
	[0194.567] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.567] WbemDefPath:IUnknown:Release (This=0x57ac288) returned 0x1
	[0194.567] WbemDefPath:IUnknown:Release (This=0x57ac288) returned 0x0
	[0194.567] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.568] WbemDefPath:IUnknown:Release (This=0x5876c88) returned 0x1
	[0194.568] WbemDefPath:IUnknown:Release (This=0x5876c88) returned 0x0
	[0194.568] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.568] WbemDefPath:IUnknown:Release (This=0x588ded0) returned 0x1
	[0194.568] WbemDefPath:IUnknown:Release (This=0x588ded0) returned 0x0
	[0194.568] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.568] WbemDefPath:IUnknown:Release (This=0x7038b0) returned 0x1
	[0194.568] WbemDefPath:IUnknown:Release (This=0x7038b0) returned 0x0
	[0194.568] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.568] WbemDefPath:IUnknown:Release (This=0x5845ae8) returned 0x1
	[0194.568] WbemDefPath:IUnknown:Release (This=0x5845ae8) returned 0x0
	[0194.568] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.568] WbemDefPath:IUnknown:Release (This=0x58454c8) returned 0x1
	[0194.568] WbemDefPath:IUnknown:Release (This=0x58454c8) returned 0x0
	[0194.568] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.569] WbemDefPath:IUnknown:Release (This=0x585bf08) returned 0x1
	[0194.569] WbemDefPath:IUnknown:Release (This=0x585bf08) returned 0x0
	[0194.569] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.569] WbemDefPath:IUnknown:Release (This=0x5876978) returned 0x1
	[0194.569] WbemDefPath:IUnknown:Release (This=0x5876978) returned 0x0
	[0194.569] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.569] WbemDefPath:IUnknown:Release (This=0x588e4f0) returned 0x1
	[0194.569] WbemDefPath:IUnknown:Release (This=0x588e4f0) returned 0x0
	[0194.569] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.569] WbemDefPath:IUnknown:Release (This=0x585b8e8) returned 0x1
	[0194.569] WbemDefPath:IUnknown:Release (This=0x585b8e8) returned 0x0
	[0194.569] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.569] WbemDefPath:IUnknown:Release (This=0x57acbb8) returned 0x1
	[0194.570] WbemDefPath:IUnknown:Release (This=0x57acbb8) returned 0x0
	[0194.570] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.570] WbemDefPath:IUnknown:Release (This=0x57acc98) returned 0x1
	[0194.570] WbemDefPath:IUnknown:Release (This=0x57acc98) returned 0x0
	[0194.570] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.570] WbemDefPath:IUnknown:Release (This=0x5876668) returned 0x1
	[0194.570] WbemDefPath:IUnknown:Release (This=0x5876668) returned 0x0
	[0194.570] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.570] WbemDefPath:IUnknown:Release (This=0x585b2c8) returned 0x1
	[0194.570] WbemDefPath:IUnknown:Release (This=0x585b2c8) returned 0x0
	[0194.570] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.570] WbemDefPath:IUnknown:Release (This=0x588e3a0) returned 0x1
	[0194.570] WbemDefPath:IUnknown:Release (This=0x588e3a0) returned 0x0
	[0194.570] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.570] WbemDefPath:IUnknown:Release (This=0x57ac678) returned 0x1
	[0194.571] WbemDefPath:IUnknown:Release (This=0x57ac678) returned 0x0
	[0194.571] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.571] WbemDefPath:IUnknown:Release (This=0x5877078) returned 0x1
	[0194.571] WbemDefPath:IUnknown:Release (This=0x5877078) returned 0x0
	[0194.571] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.571] WbemDefPath:IUnknown:Release (This=0x5876358) returned 0x1
	[0194.571] WbemDefPath:IUnknown:Release (This=0x5876358) returned 0x0
	[0194.571] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.571] WbemDefPath:IUnknown:Release (This=0x57ac058) returned 0x1
	[0194.571] WbemDefPath:IUnknown:Release (This=0x57ac058) returned 0x0
	[0194.571] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.571] WbemDefPath:IUnknown:Release (This=0x5876a58) returned 0x1
	[0194.571] WbemDefPath:IUnknown:Release (This=0x5876a58) returned 0x0
	[0194.571] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.571] WbemDefPath:IUnknown:Release (This=0x5876438) returned 0x1
	[0194.571] WbemDefPath:IUnknown:Release (This=0x5876438) returned 0x0
	[0194.572] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.572] WbemDefPath:IUnknown:Release (This=0x588dd80) returned 0x1
	[0194.572] WbemDefPath:IUnknown:Release (This=0x588dd80) returned 0x0
	[0194.572] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.572] WbemDefPath:IUnknown:Release (This=0x5845ed8) returned 0x1
	[0194.572] WbemDefPath:IUnknown:Release (This=0x5845ed8) returned 0x0
	[0194.572] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.572] WbemDefPath:IUnknown:Release (This=0x585bc68) returned 0x1
	[0194.572] WbemDefPath:IUnknown:Release (This=0x585bc68) returned 0x0
	[0194.572] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.572] WbemDefPath:IUnknown:Release (This=0x58458b8) returned 0x1
	[0194.572] WbemDefPath:IUnknown:Release (This=0x58458b8) returned 0x0
	[0194.572] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.572] WbemDefPath:IUnknown:Release (This=0x5845298) returned 0x1
	[0194.573] WbemDefPath:IUnknown:Release (This=0x5845298) returned 0x0
	[0194.573] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.573] WbemDefPath:IUnknown:Release (This=0x585bcd8) returned 0x1
	[0194.573] WbemDefPath:IUnknown:Release (This=0x585bcd8) returned 0x0
	[0194.573] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.573] WbemDefPath:IUnknown:Release (This=0x5876dd8) returned 0x1
	[0194.573] WbemDefPath:IUnknown:Release (This=0x5876dd8) returned 0x0
	[0194.573] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.573] WbemDefPath:IUnknown:Release (This=0x585b6b8) returned 0x1
	[0194.573] WbemDefPath:IUnknown:Release (This=0x585b6b8) returned 0x0
	[0194.573] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.573] WbemDefPath:IUnknown:Release (This=0x57aca68) returned 0x1
	[0194.573] WbemDefPath:IUnknown:Release (This=0x57aca68) returned 0x0
	[0194.573] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.573] WbemDefPath:IUnknown:Release (This=0x57ac448) returned 0x1
	[0194.573] WbemDefPath:IUnknown:Release (This=0x57ac448) returned 0x0
	[0194.574] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5876e48) returned 0x1
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5876e48) returned 0x0
	[0194.574] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5876828) returned 0x1
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5876828) returned 0x0
	[0194.574] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5845ca8) returned 0x1
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5845ca8) returned 0x0
	[0194.574] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5845688) returned 0x1
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5845688) returned 0x0
	[0194.574] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5845068) returned 0x1
	[0194.574] WbemDefPath:IUnknown:Release (This=0x5845068) returned 0x0
	[0194.575] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.575] WbemDefPath:IUnknown:Release (This=0x57ace58) returned 0x1
	[0194.575] WbemDefPath:IUnknown:Release (This=0x57ace58) returned 0x0
	[0194.575] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.575] WbemDefPath:IUnknown:Release (This=0x585b488) returned 0x1
	[0194.575] WbemDefPath:IUnknown:Release (This=0x585b488) returned 0x0
	[0194.575] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.575] WbemDefPath:IUnknown:Release (This=0x57ac838) returned 0x1
	[0194.575] WbemDefPath:IUnknown:Release (This=0x57ac838) returned 0x0
	[0194.575] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.575] WbemDefPath:IUnknown:Release (This=0x5877238) returned 0x1
	[0194.575] WbemDefPath:IUnknown:Release (This=0x5877238) returned 0x0
	[0194.575] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.575] WbemDefPath:IUnknown:Release (This=0x588da70) returned 0x1
	[0194.575] WbemDefPath:IUnknown:Release (This=0x588da70) returned 0x0
	[0194.575] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.576] WbemDefPath:IUnknown:Release (This=0x57ac218) returned 0x1
	[0194.576] WbemDefPath:IUnknown:Release (This=0x57ac218) returned 0x0
	[0194.576] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.576] WbemDefPath:IUnknown:Release (This=0x58765f8) returned 0x1
	[0194.576] WbemDefPath:IUnknown:Release (This=0x58765f8) returned 0x0
	[0194.576] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.576] WbemDefPath:IUnknown:Release (This=0x5845a78) returned 0x1
	[0194.576] WbemDefPath:IUnknown:Release (This=0x5845a78) returned 0x0
	[0194.576] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.576] WbemDefPath:IUnknown:Release (This=0x5845458) returned 0x1
	[0194.576] WbemDefPath:IUnknown:Release (This=0x5845458) returned 0x0
	[0194.576] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.576] WbemDefPath:IUnknown:Release (This=0x585be98) returned 0x1
	[0194.576] WbemDefPath:IUnknown:Release (This=0x585be98) returned 0x0
	[0194.576] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.576] WbemDefPath:IUnknown:Release (This=0x585b878) returned 0x1
	[0194.577] WbemDefPath:IUnknown:Release (This=0x585b878) returned 0x0
	[0194.577] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.577] WbemDefPath:IUnknown:Release (This=0x57acc28) returned 0x1
	[0194.577] WbemDefPath:IUnknown:Release (This=0x57acc28) returned 0x0
	[0194.577] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.577] WbemDefPath:IUnknown:Release (This=0x588de60) returned 0x1
	[0194.577] WbemDefPath:IUnknown:Release (This=0x588de60) returned 0x0
	[0194.577] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.577] WbemDefPath:IUnknown:Release (This=0x57ac608) returned 0x1
	[0194.577] WbemDefPath:IUnknown:Release (This=0x57ac608) returned 0x0
	[0194.577] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.577] WbemDefPath:IUnknown:Release (This=0x5877008) returned 0x1
	[0194.577] WbemDefPath:IUnknown:Release (This=0x5877008) returned 0x0
	[0194.578] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.578] WbemDefPath:IUnknown:Release (This=0x588d840) returned 0x1
	[0194.578] WbemDefPath:IUnknown:Release (This=0x588d840) returned 0x0
	[0194.578] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.578] WbemDefPath:IUnknown:Release (This=0x58769e8) returned 0x1
	[0194.578] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.578] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.578] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.578] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.578] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.578] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.578] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.579] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.580] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.581] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.581] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.581] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.581] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.581] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.581] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.581] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.581] CoGetContextToken (in: pToken=0xe8f878 | out: pToken=0xe8f878) returned 0x0
	[0194.581] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.581] WbemLocator:IUnknown:Release (This=0x57b19f8) returned 0x1
	[0194.581] WbemLocator:IUnknown:Release (This=0x5dd8608) returned 0x0
	[0194.582] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.582] WbemLocator:IUnknown:Release (This=0x57b1df8) returned 0x1
	[0194.582] WbemLocator:IUnknown:Release (This=0x5dd8158) returned 0x0
	[0194.584] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.584] WbemLocator:IUnknown:Release (This=0x57b06f8) returned 0x1
	[0194.584] WbemLocator:IUnknown:Release (This=0x5dd8748) returned 0x0
	[0194.585] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.585] WbemLocator:IUnknown:Release (This=0x57b08f8) returned 0x1
	[0194.585] WbemLocator:IUnknown:Release (This=0x785a70) returned 0x0
	[0194.586] CoGetContextToken (in: pToken=0xe8f800 | out: pToken=0xe8f800) returned 0x0
	[0194.586] WbemLocator:IUnknown:Release (This=0x57b16f8) returned 0x1
	[0194.586] WbemLocator:IUnknown:Release (This=0x585ce20) returned 0x0
	[0194.586] IUnknown:Release (This=0x6d0ad8) returned 0x0

Thread:
	id = 19
	os_tid = 0xd98


Thread:
	id = 20
	os_tid = 0x858


Thread:
	id = 21
	os_tid = 0x102c


Thread:
	id = 22
	os_tid = 0x1030

	[0145.821] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0145.821] RoInitialize () returned 0x1
	[0145.821] RoUninitialize () returned 0x0
	[0145.823] ResetEvent (hEvent=0x2c8) returned 1

Thread:
	id = 25
	os_tid = 0x47c


Thread:
	id = 26
	os_tid = 0xd0c


Thread:
	id = 27
	os_tid = 0x12a8

	[0172.870] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0172.870] RoInitialize () returned 0x1
	[0172.870] RoUninitialize () returned 0x0
	[0172.872] SetConsoleCtrlHandler (HandlerRoutine=0x124077e, Add=1) returned 1
	[0172.873] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0172.873] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0172.874] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.5c39d4.0", lpWndClass=0x2817c78 | out: lpWndClass=0x2817c78) returned 0
	[0172.876] CoTaskMemAlloc (cb=0x56) returned 0x74e490
	[0172.876] RegisterClassW (lpWndClass=0x5b6f804) returned 0xc1de
	[0172.877] CoTaskMemFree (pv=0x74e490) 
	[0172.877] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.5c39d4.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.5c39d4.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3021a
	[0172.878] NtdllDefWindowProc_W (hWnd=0x3021a, Msg=0x81, wParam=0x0, lParam=0x5b6f340) returned 0x1
	[0172.881] NtdllDefWindowProc_W (hWnd=0x3021a, Msg=0x83, wParam=0x0, lParam=0x5b6f32c) returned 0x0
	[0172.881] NtdllDefWindowProc_W (hWnd=0x3021a, Msg=0x1, wParam=0x0, lParam=0x5b6f340) returned 0x0
	[0172.882] NtdllDefWindowProc_W (hWnd=0x3021a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0172.882] NtdllDefWindowProc_W (hWnd=0x3021a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0172.882] SetEvent (hEvent=0x640) returned 1
	[0172.882] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0173.034] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0173.174] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0173.569] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0173.716] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0174.004] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0174.280] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0174.717] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0175.515] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0175.996] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0176.189] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0176.412] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0176.695] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0176.864] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0177.169] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0177.463] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0178.333] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0178.657] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0179.010] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0179.216] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0180.919] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0181.137] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0181.898] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0182.168] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0182.724] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0183.307] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0183.538] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0183.866] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0184.044] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0184.309] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0184.463] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0184.841] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0184.944] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0185.048] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0185.204] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0185.311] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0185.459] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0185.589] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0185.694] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0185.809] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0186.131] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0186.457] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0186.595] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0186.750] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0186.864] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0187.005] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0187.112] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0187.284] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0187.431] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0187.572] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0187.717] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0187.883] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0187.989] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0188.143] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0188.303] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0188.544] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0188.679] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0188.825] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0188.950] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0189.163] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0189.455] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0189.569] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0189.886] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0190.078] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0190.187] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0190.350] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0190.482] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0190.637] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0190.777] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0190.939] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0191.078] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0191.192] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0191.309] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0191.438] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0191.596] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0191.700] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0191.809] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0191.949] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0192.148] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0192.311] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0192.415] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0192.519] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0192.622] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0192.726] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0192.844] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0192.951] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0193.056] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0193.160] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0193.265] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0193.368] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0193.518] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0193.623] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0193.726] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0193.828] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0193.931] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0194.049] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0194.152] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0194.337] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0
	[0194.422] PeekMessageW (in: lpMsg=0x5b6f8f4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5b6f8f4) returned 1
	[0194.423] IsWindow (hWnd=0x3021a) returned 1
	[0194.424] GetModuleHandleW (lpModuleName="user32.dll") returned 0x76300000
	[0194.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x5b6f800, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW\x06j\x1b͹; «´kÐø¶\x05ø\x9bu", lpUsedDefaultChar=0x0) returned 14
	[0194.425] GetProcAddress (hModule=0x76300000, lpProcName="DefWindowProcW") returned 0x772eaee0
	[0194.425] SetWindowLongW (hWnd=0x3021a, nIndex=-4, dwNewLong=1999548128) returned 19138470
	[0194.426] SetClassLongW (hWnd=0x3021a, nIndex=-24, dwNewLong=1999548128) returned 0x12407a6
	[0194.426] IsWindow (hWnd=0x3021a) returned 1
	[0194.426] DestroyWindow (hWnd=0x3021a) returned 1
	[0194.433] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0194.433] UnregisterClassW (lpClassName=".NET-BroadcastEventWindow.4.0.0.0.5c39d4.0", hInstance=0x400000) returned 1
	[0194.433] SetConsoleCtrlHandler (HandlerRoutine=0x124077e, Add=0) returned 1
	[0194.433] SetEvent (hEvent=0x3f0) returned 1
	[0194.434] CoGetContextToken (in: pToken=0x5b6fc3c | out: pToken=0x5b6fc3c) returned 0x0
	[0194.434] IUnknown:QueryInterface (in: This=0x6d0ad8, riid=0x6bbd4564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5b6fc60 | out: ppvObject=0x5b6fc60*=0x6d0ae4) returned 0x0
	[0194.435] IComThreadingInfo:GetCurrentThreadType (in: This=0x6d0ae4, pThreadType=0x5b6fc8c | out: pThreadType=0x5b6fc8c*=0) returned 0x0
	[0194.435] IUnknown:Release (This=0x6d0ae4) returned 0x1
	[0194.435] CoUninitialize () 

Thread:
	id = 28
	os_tid = 0x828


Process:
	id = "3"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x4471b000"
	os_pid = "0xe7c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0xe4c"
	cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\Windows"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd44" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 847
	        start_va = 0x10000
	          end_va = 0x2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 848
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 849
	        start_va = 0x50000
	          end_va = 0x8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 850
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 851
	        start_va = 0x400000
	          end_va = 0x5fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 852
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 853
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 854
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 855
	        start_va = 0x7ff747c50000
	          end_va = 0x7ff747c60fff
	       monitored = 0
	     entry_point = 0x7ff747c516b0
	     region_type = mapped_file
	            name = "conhost.exe"
	        filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe")

Region:
	              id = 856
	        start_va = 0x7ffc5f810000
	          end_va = 0x7ffc5f9d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 857
	        start_va = 0x740000
	          end_va = 0x83ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000740000"
	        filename = ""

Region:
	              id = 858
	        start_va = 0x7ffc5bfa0000
	          end_va = 0x7ffc5c187fff
	       monitored = 0
	     entry_point = 0x7ffc5bfcba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 859
	        start_va = 0x7ffc5ecd0000
	          end_va = 0x7ffc5ed7cfff
	       monitored = 0
	     entry_point = 0x7ffc5ece81a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 860
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 861
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 862
	        start_va = 0x90000
	          end_va = 0x14dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 863
	        start_va = 0x7ffc5e850000
	          end_va = 0x7ffc5e8ecfff
	       monitored = 0
	     entry_point = 0x7ffc5e8578a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 864
	        start_va = 0x150000
	          end_va = 0x18ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000150000"
	        filename = ""

Region:
	              id = 865
	        start_va = 0x190000
	          end_va = 0x1bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 866
	        start_va = 0x20000
	          end_va = 0x26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 867
	        start_va = 0x7ffc44e50000
	          end_va = 0x7ffc44ea8fff
	       monitored = 0
	     entry_point = 0x7ffc44e5fbf0
	     region_type = mapped_file
	            name = "conhostv2.dll"
	        filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll")

Region:
	              id = 868
	        start_va = 0x190000
	          end_va = 0x190fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 869
	        start_va = 0x1b0000
	          end_va = 0x1bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 870
	        start_va = 0x7ffc5f2c0000
	          end_va = 0x7ffc5f53cfff
	       monitored = 0
	     entry_point = 0x7ffc5f394970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 871
	        start_va = 0x7ffc5e2b0000
	          end_va = 0x7ffc5e3cbfff
	       monitored = 0
	     entry_point = 0x7ffc5e2f02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 872
	        start_va = 0x7ffc5cac0000
	          end_va = 0x7ffc5cb29fff
	       monitored = 0
	     entry_point = 0x7ffc5caf6d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 873
	        start_va = 0x7ffc5e960000
	          end_va = 0x7ffc5eab5fff
	       monitored = 0
	     entry_point = 0x7ffc5e96a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 874
	        start_va = 0x7ffc5f540000
	          end_va = 0x7ffc5f6c5fff
	       monitored = 0
	     entry_point = 0x7ffc5f58ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 875
	        start_va = 0x1a0000
	          end_va = 0x1a6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001a0000"
	        filename = ""

Region:
	              id = 876
	        start_va = 0x7ffc5e3e0000
	          end_va = 0x7ffc5e522fff
	       monitored = 0
	     entry_point = 0x7ffc5e408210
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 877
	        start_va = 0x7ffc5e8f0000
	          end_va = 0x7ffc5e94afff
	       monitored = 0
	     entry_point = 0x7ffc5e9038b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 878
	        start_va = 0x7ffc5e810000
	          end_va = 0x7ffc5e84afff
	       monitored = 0
	     entry_point = 0x7ffc5e8112f0
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 879
	        start_va = 0x7ffc5e1e0000
	          end_va = 0x7ffc5e2a0fff
	       monitored = 0
	     entry_point = 0x7ffc5e200da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 880
	        start_va = 0x7ffc5a3a0000
	          end_va = 0x7ffc5a525fff
	       monitored = 0
	     entry_point = 0x7ffc5a3ed700
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 881
	        start_va = 0x1c0000
	          end_va = 0x1c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 882
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 883
	        start_va = 0x840000
	          end_va = 0x9c7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000840000"
	        filename = ""

Region:
	              id = 884
	        start_va = 0x9d0000
	          end_va = 0xb50fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 885
	        start_va = 0xb60000
	          end_va = 0x1f5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b60000"
	        filename = ""

Region:
	              id = 886
	        start_va = 0x600000
	          end_va = 0x6fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 887
	        start_va = 0x600000
	          end_va = 0x63ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 888
	        start_va = 0x6f0000
	          end_va = 0x6fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006f0000"
	        filename = ""

Region:
	              id = 889
	        start_va = 0x7ffc5be30000
	          end_va = 0x7ffc5be43fff
	       monitored = 0
	     entry_point = 0x7ffc5be352e0
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 890
	        start_va = 0x7ffc5be50000
	          end_va = 0x7ffc5be5efff
	       monitored = 0
	     entry_point = 0x7ffc5be53210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 891
	        start_va = 0x7ffc5be70000
	          end_va = 0x7ffc5bebafff
	       monitored = 0
	     entry_point = 0x7ffc5be735f0
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 892
	        start_va = 0x7ffc5bec0000
	          end_va = 0x7ffc5bf02fff
	       monitored = 0
	     entry_point = 0x7ffc5bed4b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 893
	        start_va = 0x7ffc5c3c0000
	          end_va = 0x7ffc5ca03fff
	       monitored = 0
	     entry_point = 0x7ffc5c5864b0
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll")

Region:
	              id = 894
	        start_va = 0x7ffc5cb50000
	          end_va = 0x7ffc5cc04fff
	       monitored = 0
	     entry_point = 0x7ffc5cb922e0
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll")

Region:
	              id = 895
	        start_va = 0x7ffc5cc80000
	          end_va = 0x7ffc5e1defff
	       monitored = 0
	     entry_point = 0x7ffc5cde11f0
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 896
	        start_va = 0x7ffc5e7b0000
	          end_va = 0x7ffc5e801fff
	       monitored = 0
	     entry_point = 0x7ffc5e7bf530
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 897
	        start_va = 0x7ffc5ec20000
	          end_va = 0x7ffc5ecc6fff
	       monitored = 0
	     entry_point = 0x7ffc5ec358d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 898
	        start_va = 0x7ffc5a7b0000
	          end_va = 0x7ffc5a845fff
	       monitored = 0
	     entry_point = 0x7ffc5a7d5570
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 917
	        start_va = 0x1f60000
	          end_va = 0x211ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f60000"
	        filename = ""

Region:
	              id = 943
	        start_va = 0x2120000
	          end_va = 0x2338fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002120000"
	        filename = ""

Region:
	              id = 944
	        start_va = 0x2340000
	          end_va = 0x2559fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002340000"
	        filename = ""

Region:
	              id = 945
	        start_va = 0x1f60000
	          end_va = 0x206afff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f60000"
	        filename = ""

Region:
	              id = 946
	        start_va = 0x2110000
	          end_va = 0x211ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002110000"
	        filename = ""

Region:
	              id = 947
	        start_va = 0x2560000
	          end_va = 0x277bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002560000"
	        filename = ""

Region:
	              id = 949
	        start_va = 0x2780000
	          end_va = 0x2891fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002780000"
	        filename = ""

Region:
	              id = 951
	        start_va = 0x640000
	          end_va = 0x67ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000640000"
	        filename = ""

Region:
	              id = 952
	        start_va = 0x7ffc5eac0000
	          end_va = 0x7ffc5ec19fff
	       monitored = 0
	     entry_point = 0x7ffc5eb038e0
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 955
	        start_va = 0x50000
	          end_va = 0x50fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 956
	        start_va = 0x28a0000
	          end_va = 0x295bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000028a0000"
	        filename = ""

Region:
	              id = 957
	        start_va = 0x50000
	          end_va = 0x53fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 958
	        start_va = 0x7ffc59dc0000
	          end_va = 0x7ffc59de1fff
	       monitored = 0
	     entry_point = 0x7ffc59dc1a40
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 963
	        start_va = 0x7ffc5a2c0000
	          end_va = 0x7ffc5a2d2fff
	       monitored = 0
	     entry_point = 0x7ffc5a2c2760
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 965
	        start_va = 0x7ffc5bc40000
	          end_va = 0x7ffc5bc95fff
	       monitored = 0
	     entry_point = 0x7ffc5bc50bf0
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 966
	        start_va = 0x60000
	          end_va = 0x66fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 967
	        start_va = 0x70000
	          end_va = 0x70fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 968
	        start_va = 0x80000
	          end_va = 0x80fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000080000"
	        filename = ""

Region:
	              id = 969
	        start_va = 0x1e0000
	          end_va = 0x1e1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 970
	        start_va = 0x1f0000
	          end_va = 0x1f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 971
	        start_va = 0x680000
	          end_va = 0x684fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 972
	        start_va = 0x690000
	          end_va = 0x690fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "conhostv2.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui")

Region:
	              id = 974
	        start_va = 0x6a0000
	          end_va = 0x6a1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006a0000"
	        filename = ""

Region:
	              id = 975
	        start_va = 0x2960000
	          end_va = 0x2b55fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002960000"
	        filename = ""

Region:
	              id = 976
	        start_va = 0x7ffc52e60000
	          end_va = 0x7ffc530d3fff
	       monitored = 0
	     entry_point = 0x7ffc52ed0400
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll")

Region:
	              id = 977
	        start_va = 0x6b0000
	          end_va = 0x6b0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "windowsshell.manifest"
	        filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest")

Region:
	              id = 978
	        start_va = 0x6c0000
	          end_va = 0x6c1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006c0000"
	        filename = ""

Region:
	              id = 979
	        start_va = 0x2b60000
	          end_va = 0x2c3cfff
	       monitored = 0
	     entry_point = 0x2bbe0b0
	     region_type = mapped_file
	            name = "rpcss.dll"
	        filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll")

Region:
	              id = 981
	        start_va = 0x6b0000
	          end_va = 0x6b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006b0000"
	        filename = ""

Region:
	              id = 982
	        start_va = 0x2b60000
	          end_va = 0x2c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b60000"
	        filename = ""

Region:
	              id = 983
	        start_va = 0x2c60000
	          end_va = 0x2e5efff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002c60000"
	        filename = ""


Thread:
	id = 4
	os_tid = 0xe78


Thread:
	id = 5
	os_tid = 0xe88


Thread:
	id = 6
	os_tid = 0x688


Thread:
	id = 10
	os_tid = 0x558


Process:
	id = "4"
	image_name = "werfault.exe"
	filename = "c:\\windows\\syswow64\\werfault.exe"
	page_root = "0x6004c000"
	os_pid = "0x338"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x11ec"
	cmd_line = "C:\\Windows\\SysWOW64\\WerFault.exe -u -p 4588 -s 176"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd44" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 899
	        start_va = 0x10000
	          end_va = 0x2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 900
	        start_va = 0x30000
	          end_va = 0x30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 901
	        start_va = 0x40000
	          end_va = 0x54fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 902
	        start_va = 0x60000
	          end_va = 0x9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 903
	        start_va = 0xa0000
	          end_va = 0xdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 904
	        start_va = 0xe0000
	          end_va = 0xe3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 905
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 906
	        start_va = 0x100000
	          end_va = 0x101fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000100000"
	        filename = ""

Region:
	              id = 907
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 908
	        start_va = 0x12b0000
	          end_va = 0x12f2fff
	       monitored = 0
	     entry_point = 0x12d0f50
	     region_type = mapped_file
	            name = "werfault.exe"
	        filename = "\\Windows\\SysWOW64\\WerFault.exe" (normalized: "c:\\windows\\syswow64\\werfault.exe")

Region:
	              id = 909
	        start_va = 0x1300000
	          end_va = 0x52fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001300000"
	        filename = ""

Region:
	              id = 910
	        start_va = 0x77260000
	          end_va = 0x773dafff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 911
	        start_va = 0x7ffb0000
	          end_va = 0x7ffd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007ffb0000"
	        filename = ""

Region:
	              id = 912
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 913
	        start_va = 0x7fff0000
	          end_va = 0x7dfc5f80ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 914
	        start_va = 0x7dfc5f810000
	          end_va = 0x7ffc5f80ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007dfc5f810000"
	        filename = ""

Region:
	              id = 915
	        start_va = 0x7ffc5f810000
	          end_va = 0x7ffc5f9d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 916
	        start_va = 0x7ffc5f9d1000
	          end_va = 0x7ffffffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ffc5f9d1000"
	        filename = ""

Region:
	              id = 918
	        start_va = 0x190000
	          end_va = 0x19ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 919
	        start_va = 0x62ee0000
	          end_va = 0x62f2ffff
	       monitored = 0
	     entry_point = 0x62ef8180
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 920
	        start_va = 0x62f30000
	          end_va = 0x62fa9fff
	       monitored = 0
	     entry_point = 0x62f43290
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 921
	        start_va = 0x74530000
	          end_va = 0x7460ffff
	       monitored = 0
	     entry_point = 0x74543980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 922
	        start_va = 0x62fb0000
	          end_va = 0x62fb7fff
	       monitored = 0
	     entry_point = 0x62fb17c0
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 923
	        start_va = 0x400000
	          end_va = 0x65ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 924
	        start_va = 0x74530000
	          end_va = 0x7460ffff
	       monitored = 0
	     entry_point = 0x74543980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 925
	        start_va = 0x76c20000
	          end_va = 0x76d9dfff
	       monitored = 0
	     entry_point = 0x76cd1b90
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 926
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 927
	        start_va = 0x7feb0000
	          end_va = 0x7ffaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007feb0000"
	        filename = ""

Region:
	              id = 928
	        start_va = 0x400000
	          end_va = 0x4bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 929
	        start_va = 0x560000
	          end_va = 0x65ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000560000"
	        filename = ""

Region:
	              id = 930
	        start_va = 0x74290000
	          end_va = 0x7434dfff
	       monitored = 0
	     entry_point = 0x742c5630
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 931
	        start_va = 0x110000
	          end_va = 0x14ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 932
	        start_va = 0x150000
	          end_va = 0x18ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000150000"
	        filename = ""

Region:
	              id = 933
	        start_va = 0x77180000
	          end_va = 0x7720cfff
	       monitored = 0
	     entry_point = 0x771c9b90
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll")

Region:
	              id = 934
	        start_va = 0x6cc00000
	          end_va = 0x6cc86fff
	       monitored = 0
	     entry_point = 0x6cc6dbc0
	     region_type = mapped_file
	            name = "wer.dll"
	        filename = "\\Windows\\SysWOW64\\wer.dll" (normalized: "c:\\windows\\syswow64\\wer.dll")

Region:
	              id = 935
	        start_va = 0x76da0000
	          end_va = 0x76f5cfff
	       monitored = 0
	     entry_point = 0x76e82a10
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll")

Region:
	              id = 936
	        start_va = 0x1a0000
	          end_va = 0x1dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001a0000"
	        filename = ""

Region:
	              id = 937
	        start_va = 0x4c0000
	          end_va = 0x4fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004c0000"
	        filename = ""

Region:
	              id = 938
	        start_va = 0x74a40000
	          end_va = 0x74a83fff
	       monitored = 0
	     entry_point = 0x74a59d80
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 939
	        start_va = 0x75f60000
	          end_va = 0x7600cfff
	       monitored = 0
	     entry_point = 0x75f74f00
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 940
	        start_va = 0x76a90000
	          end_va = 0x76b0afff
	       monitored = 0
	     entry_point = 0x76aae970
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 941
	        start_va = 0x20000
	          end_va = 0x23fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 942
	        start_va = 0x73f90000
	          end_va = 0x73fadfff
	       monitored = 0
	     entry_point = 0x73f9b640
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 948
	        start_va = 0x73f80000
	          end_va = 0x73f89fff
	       monitored = 0
	     entry_point = 0x73f82a00
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 950
	        start_va = 0x75ef0000
	          end_va = 0x75f47fff
	       monitored = 0
	     entry_point = 0x75f325c0
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 953
	        start_va = 0x72070000
	          end_va = 0x72091fff
	       monitored = 0
	     entry_point = 0x720791f0
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll")

Region:
	              id = 954
	        start_va = 0x6c280000
	          end_va = 0x6c3befff
	       monitored = 0
	     entry_point = 0x6c2ad880
	     region_type = mapped_file
	            name = "dbghelp.dll"
	        filename = "\\Windows\\SysWOW64\\dbghelp.dll" (normalized: "c:\\windows\\syswow64\\dbghelp.dll")

Region:
	              id = 959
	        start_va = 0x73c30000
	          end_va = 0x73c4afff
	       monitored = 0
	     entry_point = 0x73c39050
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 960
	        start_va = 0x76fb0000
	          end_va = 0x76fe6fff
	       monitored = 0
	     entry_point = 0x76fb3b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 961
	        start_va = 0x500000
	          end_va = 0x53ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000500000"
	        filename = ""

Region:
	              id = 962
	        start_va = 0x660000
	          end_va = 0x69ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000660000"
	        filename = ""

Region:
	              id = 964
	        start_va = 0x6ccf0000
	          end_va = 0x6cd43fff
	       monitored = 0
	     entry_point = 0x6cd210d0
	     region_type = mapped_file
	            name = "faultrep.dll"
	        filename = "\\Windows\\SysWOW64\\Faultrep.dll" (normalized: "c:\\windows\\syswow64\\faultrep.dll")

Region:
	              id = 973
	        start_va = 0x6cbd0000
	          end_va = 0x6cbf0fff
	       monitored = 0
	     entry_point = 0x6cbea910
	     region_type = mapped_file
	            name = "dbgcore.dll"
	        filename = "\\Windows\\SysWOW64\\dbgcore.dll" (normalized: "c:\\windows\\syswow64\\dbgcore.dll")

Region:
	              id = 980
	        start_va = 0x6a0000
	          end_va = 0x89ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006a0000"
	        filename = ""

Region:
	              id = 1000
	        start_va = 0x6a0000
	          end_va = 0x76ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006a0000"
	        filename = ""

Region:
	              id = 1001
	        start_va = 0x890000
	          end_va = 0x89ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000890000"
	        filename = ""

Region:
	              id = 1002
	        start_va = 0x30000
	          end_va = 0x33fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1017
	        start_va = 0x76300000
	          end_va = 0x76446fff
	       monitored = 0
	     entry_point = 0x76311cf0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 1018
	        start_va = 0x76010000
	          end_va = 0x7615efff
	       monitored = 0
	     entry_point = 0x760c6820
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 1019
	        start_va = 0x6a0000
	          end_va = 0x6c9fff
	       monitored = 0
	     entry_point = 0x6a5680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1020
	        start_va = 0x760000
	          end_va = 0x76ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000760000"
	        filename = ""

Region:
	              id = 1021
	        start_va = 0x8a0000
	          end_va = 0xa27fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008a0000"
	        filename = ""

Region:
	              id = 1022
	        start_va = 0x77150000
	          end_va = 0x7717afff
	       monitored = 0
	     entry_point = 0x77155680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1047
	        start_va = 0x1e0000
	          end_va = 0x1e1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 1048
	        start_va = 0x1f0000
	          end_va = 0x1f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 1049
	        start_va = 0x540000
	          end_va = 0x540fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000540000"
	        filename = ""

Region:
	              id = 1050
	        start_va = 0x550000
	          end_va = 0x550fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000550000"
	        filename = ""

Region:
	              id = 1051
	        start_va = 0x6a0000
	          end_va = 0x6eefff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006a0000"
	        filename = ""

Region:
	              id = 1052
	        start_va = 0xa30000
	          end_va = 0xbb0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a30000"
	        filename = ""

Region:
	              id = 1053
	        start_va = 0x5300000
	          end_va = 0x66fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005300000"
	        filename = ""

Region:
	              id = 1055
	        start_va = 0x70040000
	          end_va = 0x700b4fff
	       monitored = 0
	     entry_point = 0x70079a60
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 1057
	        start_va = 0xbc0000
	          end_va = 0xd3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000bc0000"
	        filename = ""

Region:
	              id = 1061
	        start_va = 0x6f0000
	          end_va = 0x6f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006f0000"
	        filename = ""

Region:
	              id = 1062
	        start_va = 0x700000
	          end_va = 0x700fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000700000"
	        filename = ""

Region:
	              id = 1063
	        start_va = 0x710000
	          end_va = 0x710fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1065
	        start_va = 0x710000
	          end_va = 0x714fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1067
	        start_va = 0x710000
	          end_va = 0x711fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1068
	        start_va = 0x710000
	          end_va = 0x710fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000710000"
	        filename = ""

Region:
	              id = 1069
	        start_va = 0x720000
	          end_va = 0x720fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000720000"
	        filename = ""

Region:
	              id = 1070
	        start_va = 0x74350000
	          end_va = 0x7435bfff
	       monitored = 0
	     entry_point = 0x74353930
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll")

Region:
	              id = 1071
	        start_va = 0x710000
	          end_va = 0x710fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000710000"
	        filename = ""

Region:
	              id = 1072
	        start_va = 0x6700000
	          end_va = 0x6efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006700000"
	        filename = ""

Region:
	              id = 1073
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1074
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1075
	        start_va = 0xd40000
	          end_va = 0x1076fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1076
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1077
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1078
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1079
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1080
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1081
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1082
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1083
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1084
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1085
	        start_va = 0x710000
	          end_va = 0x712fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 1086
	        start_va = 0x710000
	          end_va = 0x74ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000710000"
	        filename = ""

Region:
	              id = 1087
	        start_va = 0x770000
	          end_va = 0x7affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000770000"
	        filename = ""

Region:
	              id = 1088
	        start_va = 0x7b0000
	          end_va = 0x82ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007b0000"
	        filename = ""

Region:
	              id = 1089
	        start_va = 0x710000
	          end_va = 0x711fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "faultrep.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\faultrep.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\faultrep.dll.mui")

Region:
	              id = 1091
	        start_va = 0x720000
	          end_va = 0x720fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1094
	        start_va = 0x692a0000
	          end_va = 0x696bdfff
	       monitored = 0
	     entry_point = 0x6939ee80
	     region_type = mapped_file
	            name = "dbgeng.dll"
	        filename = "\\Windows\\SysWOW64\\dbgeng.dll" (normalized: "c:\\windows\\syswow64\\dbgeng.dll")

Region:
	              id = 1096
	        start_va = 0x743f0000
	          end_va = 0x74481fff
	       monitored = 0
	     entry_point = 0x74428cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 1097
	        start_va = 0x69230000
	          end_va = 0x6929ffff
	       monitored = 0
	     entry_point = 0x69284b90
	     region_type = mapped_file
	            name = "dbgmodel.dll"
	        filename = "\\Windows\\SysWOW64\\DbgModel.dll" (normalized: "c:\\windows\\syswow64\\dbgmodel.dll")

Region:
	              id = 1098
	        start_va = 0x6cde0000
	          end_va = 0x6ce0cfff
	       monitored = 0
	     entry_point = 0x6cdf2b00
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\SysWOW64\\xmllite.dll" (normalized: "c:\\windows\\syswow64\\xmllite.dll")

Region:
	              id = 1099
	        start_va = 0xbc0000
	          end_va = 0xca9fff
	       monitored = 0
	     entry_point = 0xbfd650
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1100
	        start_va = 0xd30000
	          end_va = 0xd3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d30000"
	        filename = ""

Region:
	              id = 1101
	        start_va = 0x6c400000
	          end_va = 0x6c409fff
	       monitored = 0
	     entry_point = 0x6c403200
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll")

Region:
	              id = 1102
	        start_va = 0x76f60000
	          end_va = 0x76fa4fff
	       monitored = 0
	     entry_point = 0x76f7de90
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 1103
	        start_va = 0x6cd70000
	          end_va = 0x6cd77fff
	       monitored = 0
	     entry_point = 0x6cd717b0
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 1104
	        start_va = 0xbc0000
	          end_va = 0xcbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000bc0000"
	        filename = ""

Region:
	              id = 1105
	        start_va = 0x76b10000
	          end_va = 0x76bfafff
	       monitored = 0
	     entry_point = 0x76b4d650
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1109
	        start_va = 0x720000
	          end_va = 0x721fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1110
	        start_va = 0x720000
	          end_va = 0x723fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1111
	        start_va = 0x720000
	          end_va = 0x725fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1112
	        start_va = 0x720000
	          end_va = 0x727fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1113
	        start_va = 0x1080000
	          end_va = 0x117ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001080000"
	        filename = ""

Region:
	              id = 1114
	        start_va = 0x720000
	          end_va = 0x729fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1115
	        start_va = 0x720000
	          end_va = 0x72bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1117
	        start_va = 0x720000
	          end_va = 0x72dfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1118
	        start_va = 0x720000
	          end_va = 0x72ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1122
	        start_va = 0x720000
	          end_va = 0x731fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1124
	        start_va = 0x720000
	          end_va = 0x733fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1125
	        start_va = 0x720000
	          end_va = 0x735fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1126
	        start_va = 0x720000
	          end_va = 0x737fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1127
	        start_va = 0x720000
	          end_va = 0x739fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1128
	        start_va = 0x720000
	          end_va = 0x73bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1129
	        start_va = 0x720000
	          end_va = 0x73dfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1130
	        start_va = 0x720000
	          end_va = 0x73ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1131
	        start_va = 0x720000
	          end_va = 0x741fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1135
	        start_va = 0x1180000
	          end_va = 0x125ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 1139
	        start_va = 0x6700000
	          end_va = 0x67d2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006700000"
	        filename = ""

Region:
	              id = 1152
	        start_va = 0x720000
	          end_va = 0x720fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 1154
	        start_va = 0x730000
	          end_va = 0x732fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "wer.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\wer.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wer.dll.mui")

Region:
	              id = 1155
	        start_va = 0x740000
	          end_va = 0x743fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000740000"
	        filename = ""

Region:
	              id = 1156
	        start_va = 0x6700000
	          end_va = 0x6efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006700000"
	        filename = ""

Region:
	              id = 1164
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1167
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1168
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1172
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1176
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1186
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1187
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1188
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1189
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1190
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1191
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1194
	        start_va = 0x750000
	          end_va = 0x752fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1203
	        start_va = 0x69650000
	          end_va = 0x696b3fff
	       monitored = 0
	     entry_point = 0x6968e270
	     region_type = mapped_file
	            name = "werui.dll"
	        filename = "\\Windows\\SysWOW64\\werui.dll" (normalized: "c:\\windows\\syswow64\\werui.dll")

Region:
	              id = 1206
	        start_va = 0x750000
	          end_va = 0x751fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1207
	        start_va = 0x74a90000
	          end_va = 0x75e8efff
	       monitored = 0
	     entry_point = 0x74c4b990
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 1209
	        start_va = 0x6eb70000
	          end_va = 0x6ed7efff
	       monitored = 0
	     entry_point = 0x6ec1b0a0
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll")

Region:
	              id = 1210
	        start_va = 0x764b0000
	          end_va = 0x769a8fff
	       monitored = 0
	     entry_point = 0x766b7610
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll")

Region:
	              id = 1211
	        start_va = 0x77210000
	          end_va = 0x77253fff
	       monitored = 0
	     entry_point = 0x77217410
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll")

Region:
	              id = 1216
	        start_va = 0x75f50000
	          end_va = 0x75f5efff
	       monitored = 0
	     entry_point = 0x75f52e40
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 1217
	        start_va = 0x743f0000
	          end_va = 0x74481fff
	       monitored = 0
	     entry_point = 0x74428cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 1221
	        start_va = 0x694e0000
	          end_va = 0x69646fff
	       monitored = 0
	     entry_point = 0x6955b9d0
	     region_type = mapped_file
	            name = "dui70.dll"
	        filename = "\\Windows\\SysWOW64\\dui70.dll" (normalized: "c:\\windows\\syswow64\\dui70.dll")

Region:
	              id = 1222
	        start_va = 0x6ffd0000
	          end_va = 0x6fff7fff
	       monitored = 0
	     entry_point = 0x6ffd7820
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll")

Region:
	              id = 1235
	        start_va = 0x770000
	          end_va = 0x771fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000770000"
	        filename = ""

Region:
	              id = 1245
	        start_va = 0x780000
	          end_va = 0x780fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "windowsshell.manifest"
	        filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest")

Region:
	              id = 1246
	        start_va = 0x790000
	          end_va = 0x791fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000790000"
	        filename = ""

Region:
	              id = 1247
	        start_va = 0x6700000
	          end_va = 0x67fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006700000"
	        filename = ""

Region:
	              id = 1248
	        start_va = 0x780000
	          end_va = 0x780fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000780000"
	        filename = ""

Region:
	              id = 1249
	        start_va = 0x74360000
	          end_va = 0x743e3fff
	       monitored = 0
	     entry_point = 0x74386220
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 1250
	        start_va = 0x7a0000
	          end_va = 0x7a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007a0000"
	        filename = ""

Region:
	              id = 1251
	        start_va = 0x6cb70000
	          end_va = 0x6cba3fff
	       monitored = 0
	     entry_point = 0x6cb88280
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll")

Region:
	              id = 1872
	        start_va = 0x830000
	          end_va = 0x86ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000830000"
	        filename = ""

Region:
	              id = 1873
	        start_va = 0xcc0000
	          end_va = 0xcfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000cc0000"
	        filename = ""

Region:
	              id = 1874
	        start_va = 0x1260000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001260000"
	        filename = ""

Region:
	              id = 1875
	        start_va = 0x6800000
	          end_va = 0x683ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006800000"
	        filename = ""

Region:
	              id = 1876
	        start_va = 0x6840000
	          end_va = 0x687ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006840000"
	        filename = ""

Region:
	              id = 1877
	        start_va = 0x6880000
	          end_va = 0x68bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006880000"
	        filename = ""

Region:
	              id = 1960
	        start_va = 0x6cd60000
	          end_va = 0x6cd68fff
	       monitored = 0
	     entry_point = 0x6cd63830
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll")

Region:
	              id = 2339
	        start_va = 0x780000
	          end_va = 0x780fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000780000"
	        filename = ""

Region:
	              id = 2340
	        start_va = 0x6cb70000
	          end_va = 0x6cba3fff
	       monitored = 0
	     entry_point = 0x6cb88280
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll")

Region:
	              id = 2456
	        start_va = 0x6cd60000
	          end_va = 0x6cd68fff
	       monitored = 0
	     entry_point = 0x6cd63830
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll")

Region:
	              id = 2598
	        start_va = 0x780000
	          end_va = 0x784fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "werui.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\werui.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\werui.dll.mui")

Region:
	              id = 2604
	        start_va = 0x870000
	          end_va = 0x870fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000870000"
	        filename = ""

Region:
	              id = 2605
	        start_va = 0x6cb70000
	          end_va = 0x6cba3fff
	       monitored = 0
	     entry_point = 0x6cb88280
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll")

Region:
	              id = 2626
	        start_va = 0x6cd60000
	          end_va = 0x6cd68fff
	       monitored = 0
	     entry_point = 0x6cd63830
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll")

Region:
	              id = 2627
	        start_va = 0x68c0000
	          end_va = 0x68fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000068c0000"
	        filename = ""

Region:
	              id = 2628
	        start_va = 0x6900000
	          end_va = 0x693ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006900000"
	        filename = ""

Region:
	              id = 2629
	        start_va = 0x870000
	          end_va = 0x870fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000870000"
	        filename = ""

Region:
	              id = 2630
	        start_va = 0x6cb70000
	          end_va = 0x6cba3fff
	       monitored = 0
	     entry_point = 0x6cb88280
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll")

Region:
	              id = 2631
	        start_va = 0x6cd60000
	          end_va = 0x6cd68fff
	       monitored = 0
	     entry_point = 0x6cd63830
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll")

Region:
	              id = 2632
	        start_va = 0x870000
	          end_va = 0x871fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000870000"
	        filename = ""

Region:
	              id = 2633
	        start_va = 0x68650000
	          end_va = 0x686cafff
	       monitored = 0
	     entry_point = 0x68674d80
	     region_type = mapped_file
	            name = "duser.dll"
	        filename = "\\Windows\\SysWOW64\\duser.dll" (normalized: "c:\\windows\\syswow64\\duser.dll")

Region:
	              id = 2634
	        start_va = 0x6940000
	          end_va = 0x697ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006940000"
	        filename = ""

Region:
	              id = 2635
	        start_va = 0x6980000
	          end_va = 0x69bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006980000"
	        filename = ""

Region:
	              id = 2636
	        start_va = 0x685c0000
	          end_va = 0x68640fff
	       monitored = 0
	     entry_point = 0x685c6310
	     region_type = mapped_file
	            name = "riched20.dll"
	        filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll")

Region:
	              id = 2637
	        start_va = 0x6cb90000
	          end_va = 0x6cba5fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 2638
	        start_va = 0x68580000
	          end_va = 0x685b0fff
	       monitored = 0
	     entry_point = 0x685922d0
	     region_type = mapped_file
	            name = "msls31.dll"
	        filename = "\\Windows\\SysWOW64\\msls31.dll" (normalized: "c:\\windows\\syswow64\\msls31.dll")

Region:
	              id = 2639
	        start_va = 0x880000
	          end_va = 0x880fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000880000"
	        filename = ""

Region:
	              id = 2640
	        start_va = 0x69c0000
	          end_va = 0x6a7bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000069c0000"
	        filename = ""

Region:
	              id = 2641
	        start_va = 0x880000
	          end_va = 0x883fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000880000"
	        filename = ""

Region:
	              id = 2642
	        start_va = 0x6f920000
	          end_va = 0x6f93cfff
	       monitored = 0
	     entry_point = 0x6f923b10
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")

Region:
	              id = 2643
	        start_va = 0xd00000
	          end_va = 0xd03fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d00000"
	        filename = ""

Region:
	              id = 2644
	        start_va = 0xd10000
	          end_va = 0xd10fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d10000"
	        filename = ""

Region:
	              id = 2645
	        start_va = 0xd20000
	          end_va = 0xd26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d20000"
	        filename = ""

Region:
	              id = 2646
	        start_va = 0x12a0000
	          end_va = 0x12a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000012a0000"
	        filename = ""

Region:
	              id = 2647
	        start_va = 0x6cde0000
	          end_va = 0x6ce0cfff
	       monitored = 0
	     entry_point = 0x6cdf2b00
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\SysWOW64\\xmllite.dll" (normalized: "c:\\windows\\syswow64\\xmllite.dll")

Region:
	              id = 2648
	        start_va = 0x6a80000
	          end_va = 0x6a80fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "duser.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\duser.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\duser.dll.mui")

Region:
	              id = 2649
	        start_va = 0x6cd60000
	          end_va = 0x6cd6cfff
	       monitored = 0
	     entry_point = 0x6cd67d80
	     region_type = mapped_file
	            name = "atlthunk.dll"
	        filename = "\\Windows\\SysWOW64\\atlthunk.dll" (normalized: "c:\\windows\\syswow64\\atlthunk.dll")

Region:
	              id = 2650
	        start_va = 0x6a90000
	          end_va = 0x6a92fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "comctl32.dll.mui"
	        filename = "\\Windows\\WinSxS\\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.10586.0_en-us_e9ce2dce92807715\\comctl32.dll.mui" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.10586.0_en-us_e9ce2dce92807715\\comctl32.dll.mui")

Region:
	              id = 2651
	        start_va = 0x6ab0000
	          end_va = 0x6ab2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ab0000"
	        filename = ""

Region:
	              id = 2652
	        start_va = 0x6ac0000
	          end_va = 0x6fb1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006ac0000"
	        filename = ""

Region:
	              id = 2653
	        start_va = 0x6fc0000
	          end_va = 0x7ffffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "staticcache.dat"
	        filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat")

Region:
	              id = 2654
	        start_va = 0x8000000
	          end_va = 0x8041fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000008000000"
	        filename = ""

Region:
	              id = 2655
	        start_va = 0x6aa0000
	          end_va = 0x6aa0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006aa0000"
	        filename = ""

Region:
	              id = 2656
	        start_va = 0x74120000
	          end_va = 0x7423efff
	       monitored = 0
	     entry_point = 0x74165980
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")


Thread:
	id = 7
	os_tid = 0xf0


Thread:
	id = 8
	os_tid = 0x340


Thread:
	id = 9
	os_tid = 0x6fc


Thread:
	id = 11
	os_tid = 0x588


Thread:
	id = 15
	os_tid = 0x794


Thread:
	id = 16
	os_tid = 0x137c


Thread:
	id = 17
	os_tid = 0xd08


Thread:
	id = 18
	os_tid = 0x814


Thread:
	id = 23
	os_tid = 0x10b0


Thread:
	id = 24
	os_tid = 0x10d8


Process:
	id = "5"
	image_name = "9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe"
	filename = "c:\\users\\rdhj0cnfevzx\\desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe"
	page_root = "0x29638000"
	os_pid = "0x7ac"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x11ec"
	cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\9642554127816b22f13288b6ae6b06f4ca66f04d1e8073bded6ad065f6147abd.exe\" "
	cur_dir = "C:\\Windows\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd44" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Process:
	id = "6"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x75fd1000"
	os_pid = "0x344"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "2"
	os_parent_pid = "0x214"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a36c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 2785
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2786
	        start_va = 0x20000
	          end_va = 0x21fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2787
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2788
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 2789
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2790
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2791
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2792
	        start_va = 0x100000
	          end_va = 0x1bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2793
	        start_va = 0x1c0000
	          end_va = 0x1c6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 2794
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2795
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 2796
	        start_va = 0x1f0000
	          end_va = 0x1f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 2797
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 2798
	        start_va = 0x400000
	          end_va = 0x4fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 2799
	        start_va = 0x500000
	          end_va = 0x500fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000500000"
	        filename = ""

Region:
	              id = 2800
	        start_va = 0x510000
	          end_va = 0x510fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000510000"
	        filename = ""

Region:
	              id = 2801
	        start_va = 0x520000
	          end_va = 0x521fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 2802
	        start_va = 0x540000
	          end_va = 0x540fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usocore.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui")

Region:
	              id = 2803
	        start_va = 0x550000
	          end_va = 0x551fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000550000"
	        filename = ""

Region:
	              id = 2804
	        start_va = 0x560000
	          end_va = 0x577fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000560000"
	        filename = ""

Region:
	              id = 2805
	        start_va = 0x580000
	          end_va = 0x63ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000580000"
	        filename = ""

Region:
	              id = 2806
	        start_va = 0x640000
	          end_va = 0x640fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000640000"
	        filename = ""

Region:
	              id = 2807
	        start_va = 0x650000
	          end_va = 0x650fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000650000"
	        filename = ""

Region:
	              id = 2808
	        start_va = 0x660000
	          end_va = 0x6dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000660000"
	        filename = ""

Region:
	              id = 2809
	        start_va = 0x6f0000
	          end_va = 0x6f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006f0000"
	        filename = ""

Region:
	              id = 2810
	        start_va = 0x700000
	          end_va = 0x706fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000700000"
	        filename = ""

Region:
	              id = 2811
	        start_va = 0x780000
	          end_va = 0x786fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000780000"
	        filename = ""

Region:
	              id = 2812
	        start_va = 0x790000
	          end_va = 0x790fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000790000"
	        filename = ""

Region:
	              id = 2813
	        start_va = 0x7a0000
	          end_va = 0x7a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007a0000"
	        filename = ""

Region:
	              id = 2814
	        start_va = 0x7c0000
	          end_va = 0x7c3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 2815
	        start_va = 0x7d0000
	          end_va = 0x7d6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007d0000"
	        filename = ""

Region:
	              id = 2816
	        start_va = 0x7e0000
	          end_va = 0x7e3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 2817
	        start_va = 0x800000
	          end_va = 0x8fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000800000"
	        filename = ""

Region:
	              id = 2818
	        start_va = 0x900000
	          end_va = 0xa87fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000900000"
	        filename = ""

Region:
	              id = 2819
	        start_va = 0xa90000
	          end_va = 0xc10fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a90000"
	        filename = ""

Region:
	              id = 2820
	        start_va = 0xc20000
	          end_va = 0x101afff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c20000"
	        filename = ""

Region:
	              id = 2821
	        start_va = 0x1020000
	          end_va = 0x106efff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001020000"
	        filename = ""

Region:
	              id = 2822
	        start_va = 0x10a0000
	          end_va = 0x10a1fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "activeds.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui")

Region:
	              id = 2823
	        start_va = 0x10b0000
	          end_va = 0x10b4fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll"
	        filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll")

Region:
	              id = 2824
	        start_va = 0x10e0000
	          end_va = 0x10e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010e0000"
	        filename = ""

Region:
	              id = 2825
	        start_va = 0x10f0000
	          end_va = 0x11effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010f0000"
	        filename = ""

Region:
	              id = 2826
	        start_va = 0x11f0000
	          end_va = 0x11f6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011f0000"
	        filename = ""

Region:
	              id = 2827
	        start_va = 0x1200000
	          end_va = 0x12fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001200000"
	        filename = ""

Region:
	              id = 2828
	        start_va = 0x1300000
	          end_va = 0x13fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001300000"
	        filename = ""

Region:
	              id = 2829
	        start_va = 0x1400000
	          end_va = 0x1736fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2830
	        start_va = 0x1740000
	          end_va = 0x183ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001740000"
	        filename = ""

Region:
	              id = 2831
	        start_va = 0x1840000
	          end_va = 0x193ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001840000"
	        filename = ""

Region:
	              id = 2832
	        start_va = 0x1940000
	          end_va = 0x19bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001940000"
	        filename = ""

Region:
	              id = 2833
	        start_va = 0x1a00000
	          end_va = 0x1afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001a00000"
	        filename = ""

Region:
	              id = 2834
	        start_va = 0x1b00000
	          end_va = 0x1bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b00000"
	        filename = ""

Region:
	              id = 2835
	        start_va = 0x1c00000
	          end_va = 0x1cdffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 2836
	        start_va = 0x1d00000
	          end_va = 0x1dfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d00000"
	        filename = ""

Region:
	              id = 2837
	        start_va = 0x1e00000
	          end_va = 0x1efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e00000"
	        filename = ""

Region:
	              id = 2838
	        start_va = 0x1f00000
	          end_va = 0x1ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f00000"
	        filename = ""

Region:
	              id = 2839
	        start_va = 0x2000000
	          end_va = 0x20fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002000000"
	        filename = ""

Region:
	              id = 2840
	        start_va = 0x2100000
	          end_va = 0x21fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002100000"
	        filename = ""

Region:
	              id = 2841
	        start_va = 0x2200000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002200000"
	        filename = ""

Region:
	              id = 2842
	        start_va = 0x2300000
	          end_va = 0x23fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 2843
	        start_va = 0x2400000
	          end_va = 0x24fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002400000"
	        filename = ""

Region:
	              id = 2844
	        start_va = 0x2500000
	          end_va = 0x25fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002500000"
	        filename = ""

Region:
	              id = 2845
	        start_va = 0x2600000
	          end_va = 0x26fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002600000"
	        filename = ""

Region:
	              id = 2846
	        start_va = 0x2700000
	          end_va = 0x27fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002700000"
	        filename = ""

Region:
	              id = 2847
	        start_va = 0x2800000
	          end_va = 0x28fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002800000"
	        filename = ""

Region:
	              id = 2848
	        start_va = 0x2900000
	          end_va = 0x2944fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db")

Region:
	              id = 2849
	        start_va = 0x2950000
	          end_va = 0x29ddfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db")

Region:
	              id = 2850
	        start_va = 0x29e0000
	          end_va = 0x2adffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000029e0000"
	        filename = ""

Region:
	              id = 2851
	        start_va = 0x2b00000
	          end_va = 0x2bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b00000"
	        filename = ""

Region:
	              id = 2852
	        start_va = 0x2c00000
	          end_va = 0x2c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c00000"
	        filename = ""

Region:
	              id = 2853
	        start_va = 0x2c80000
	          end_va = 0x2cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c80000"
	        filename = ""

Region:
	              id = 2854
	        start_va = 0x2d00000
	          end_va = 0x2dfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d00000"
	        filename = ""

Region:
	              id = 2855
	        start_va = 0x2e00000
	          end_va = 0x2efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e00000"
	        filename = ""

Region:
	              id = 2856
	        start_va = 0x2f00000
	          end_va = 0x2ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002f00000"
	        filename = ""

Region:
	              id = 2857
	        start_va = 0x3000000
	          end_va = 0x30fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003000000"
	        filename = ""

Region:
	              id = 2858
	        start_va = 0x3100000
	          end_va = 0x31fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003100000"
	        filename = ""

Region:
	              id = 2859
	        start_va = 0x3300000
	          end_va = 0x337ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003300000"
	        filename = ""

Region:
	              id = 2860
	        start_va = 0x3380000
	          end_va = 0x347ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003380000"
	        filename = ""

Region:
	              id = 2861
	        start_va = 0x34c0000
	          end_va = 0x34c6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034c0000"
	        filename = ""

Region:
	              id = 2862
	        start_va = 0x3560000
	          end_va = 0x3566fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 2863
	        start_va = 0x3570000
	          end_va = 0x366ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 2864
	        start_va = 0x36d0000
	          end_va = 0x36d6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000036d0000"
	        filename = ""

Region:
	              id = 2865
	        start_va = 0x36e0000
	          end_va = 0x37dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000036e0000"
	        filename = ""

Region:
	              id = 2866
	        start_va = 0x3800000
	          end_va = 0x38fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003800000"
	        filename = ""

Region:
	              id = 2867
	        start_va = 0x3900000
	          end_va = 0x397ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003900000"
	        filename = ""

Region:
	              id = 2868
	        start_va = 0x3980000
	          end_va = 0x39fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003980000"
	        filename = ""

Region:
	              id = 2869
	        start_va = 0x3a00000
	          end_va = 0x3afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a00000"
	        filename = ""

Region:
	              id = 2870
	        start_va = 0x3b00000
	          end_va = 0x3bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003b00000"
	        filename = ""

Region:
	              id = 2871
	        start_va = 0x3c00000
	          end_va = 0x3c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c00000"
	        filename = ""

Region:
	              id = 2872
	        start_va = 0x3c80000
	          end_va = 0x3cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c80000"
	        filename = ""

Region:
	              id = 2873
	        start_va = 0x3d00000
	          end_va = 0x3d7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d00000"
	        filename = ""

Region:
	              id = 2874
	        start_va = 0x3d80000
	          end_va = 0x3e7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d80000"
	        filename = ""

Region:
	              id = 2875
	        start_va = 0x3e80000
	          end_va = 0x3f7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e80000"
	        filename = ""

Region:
	              id = 2876
	        start_va = 0x3f80000
	          end_va = 0x407ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003f80000"
	        filename = ""

Region:
	              id = 2877
	        start_va = 0x4180000
	          end_va = 0x427ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004180000"
	        filename = ""

Region:
	              id = 2878
	        start_va = 0x4280000
	          end_va = 0x42fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004280000"
	        filename = ""

Region:
	              id = 2879
	        start_va = 0x4300000
	          end_va = 0x437ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004300000"
	        filename = ""

Region:
	              id = 2880
	        start_va = 0x4500000
	          end_va = 0x45fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004500000"
	        filename = ""

Region:
	              id = 2881
	        start_va = 0x4600000
	          end_va = 0x46fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004600000"
	        filename = ""

Region:
	              id = 2882
	        start_va = 0x4800000
	          end_va = 0x48fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004800000"
	        filename = ""

Region:
	              id = 2883
	        start_va = 0x4900000
	          end_va = 0x49fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004900000"
	        filename = ""

Region:
	              id = 2884
	        start_va = 0x4a00000
	          end_va = 0x4afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a00000"
	        filename = ""

Region:
	              id = 2885
	        start_va = 0x4c00000
	          end_va = 0x4cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c00000"
	        filename = ""

Region:
	              id = 2886
	        start_va = 0x4d00000
	          end_va = 0x4dfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d00000"
	        filename = ""

Region:
	              id = 2887
	        start_va = 0x4e00000
	          end_va = 0x4efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e00000"
	        filename = ""

Region:
	              id = 2888
	        start_va = 0x4f00000
	          end_va = 0x4ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f00000"
	        filename = ""

Region:
	              id = 2889
	        start_va = 0x5200000
	          end_va = 0x52fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005200000"
	        filename = ""

Region:
	              id = 2890
	        start_va = 0x5600000
	          end_va = 0x56fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005600000"
	        filename = ""

Region:
	              id = 2891
	        start_va = 0x5a40000
	          end_va = 0x5a46fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a40000"
	        filename = ""

Region:
	              id = 2892
	        start_va = 0x5a50000
	          end_va = 0x5a50fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "msxml6r.dll"
	        filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll")

Region:
	              id = 2893
	        start_va = 0x5a60000
	          end_va = 0x5a60fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005a60000"
	        filename = ""

Region:
	              id = 2894
	        start_va = 0x5a70000
	          end_va = 0x5a7ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui")

Region:
	              id = 2895
	        start_va = 0x5a90000
	          end_va = 0x5aa0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1256.nls"
	        filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls")

Region:
	              id = 2896
	        start_va = 0x5ab0000
	          end_va = 0x5ac0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1251.nls"
	        filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls")

Region:
	              id = 2897
	        start_va = 0x5ad0000
	          end_va = 0x5ae0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1254.nls"
	        filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls")

Region:
	              id = 2898
	        start_va = 0x5b00000
	          end_va = 0x5bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005b00000"
	        filename = ""

Region:
	              id = 2899
	        start_va = 0x5e00000
	          end_va = 0x5efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005e00000"
	        filename = ""

Region:
	              id = 2900
	        start_va = 0x5f00000
	          end_va = 0x5f10fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1250.nls"
	        filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls")

Region:
	              id = 2901
	        start_va = 0x5f20000
	          end_va = 0x5f30fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1253.nls"
	        filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls")

Region:
	              id = 2902
	        start_va = 0x5f40000
	          end_va = 0x5f50fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1257.nls"
	        filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls")

Region:
	              id = 2903
	        start_va = 0x5f60000
	          end_va = 0x5f70fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1255.nls"
	        filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls")

Region:
	              id = 2904
	        start_va = 0x5f80000
	          end_va = 0x5fa7fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_932.nls"
	        filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls")

Region:
	              id = 2905
	        start_va = 0x5fc0000
	          end_va = 0x5fc6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fc0000"
	        filename = ""

Region:
	              id = 2906
	        start_va = 0x5fd0000
	          end_va = 0x60cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 2907
	        start_va = 0x60d0000
	          end_va = 0x60e0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_874.nls"
	        filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls")

Region:
	              id = 2908
	        start_va = 0x6100000
	          end_va = 0x61fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006100000"
	        filename = ""

Region:
	              id = 2909
	        start_va = 0x6200000
	          end_va = 0x62fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006200000"
	        filename = ""

Region:
	              id = 2910
	        start_va = 0x6300000
	          end_va = 0x63fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006300000"
	        filename = ""

Region:
	              id = 2911
	        start_va = 0x6400000
	          end_va = 0x64fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006400000"
	        filename = ""

Region:
	              id = 2912
	        start_va = 0x6900000
	          end_va = 0x69fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006900000"
	        filename = ""

Region:
	              id = 2913
	        start_va = 0x6a00000
	          end_va = 0x6afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006a00000"
	        filename = ""

Region:
	              id = 2914
	        start_va = 0x6b00000
	          end_va = 0x6bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b00000"
	        filename = ""

Region:
	              id = 2915
	        start_va = 0x6c00000
	          end_va = 0x6cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c00000"
	        filename = ""

Region:
	              id = 2916
	        start_va = 0x6d00000
	          end_va = 0x6dfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006d00000"
	        filename = ""

Region:
	              id = 2917
	        start_va = 0x7000000
	          end_va = 0x70fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007000000"
	        filename = ""

Region:
	              id = 2918
	        start_va = 0x7200000
	          end_va = 0x7230fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_949.nls"
	        filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls")

Region:
	              id = 2919
	        start_va = 0x7240000
	          end_va = 0x7250fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1258.nls"
	        filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls")

Region:
	              id = 2920
	        start_va = 0x7260000
	          end_va = 0x7290fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_936.nls"
	        filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls")

Region:
	              id = 2921
	        start_va = 0x72a0000
	          end_va = 0x72d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_950.nls"
	        filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls")

Region:
	              id = 2922
	        start_va = 0x7830000
	          end_va = 0x792ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007830000"
	        filename = ""

Region:
	              id = 2923
	        start_va = 0x8530000
	          end_va = 0x862ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008530000"
	        filename = ""

Region:
	              id = 2924
	        start_va = 0x9430000
	          end_va = 0x952ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009430000"
	        filename = ""

Region:
	              id = 2925
	        start_va = 0x9530000
	          end_va = 0x962ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009530000"
	        filename = ""

Region:
	              id = 2926
	        start_va = 0x9630000
	          end_va = 0x972ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009630000"
	        filename = ""

Region:
	              id = 2927
	        start_va = 0x9730000
	          end_va = 0x982ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009730000"
	        filename = ""

Region:
	              id = 2928
	        start_va = 0x9830000
	          end_va = 0x992ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009830000"
	        filename = ""

Region:
	              id = 2929
	        start_va = 0x9930000
	          end_va = 0x9a2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009930000"
	        filename = ""

Region:
	              id = 2930
	        start_va = 0x9a30000
	          end_va = 0x9b2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009a30000"
	        filename = ""

Region:
	              id = 2931
	        start_va = 0x9b30000
	          end_va = 0x9c2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009b30000"
	        filename = ""

Region:
	              id = 2932
	        start_va = 0x9c30000
	          end_va = 0x9d2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009c30000"
	        filename = ""

Region:
	              id = 2933
	        start_va = 0x9e30000
	          end_va = 0x9f2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009e30000"
	        filename = ""

Region:
	              id = 2934
	        start_va = 0x9f30000
	          end_va = 0xa02ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009f30000"
	        filename = ""

Region:
	              id = 2935
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2936
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 2937
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 2938
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 2939
	        start_va = 0x7ff60e670000
	          end_va = 0x7ff60e67cfff
	       monitored = 0
	     entry_point = 0x7ff60e673980
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 2940
	        start_va = 0x7ffc41b80000
	          end_va = 0x7ffc41e2ffff
	       monitored = 0
	     entry_point = 0x7ffc41b81cf0
	     region_type = mapped_file
	            name = "netshell.dll"
	        filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll")

Region:
	              id = 2941
	        start_va = 0x7ffc41f40000
	          end_va = 0x7ffc41f83fff
	       monitored = 0
	     entry_point = 0x7ffc41f683e0
	     region_type = mapped_file
	            name = "updatehandlers.dll"
	        filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll")

Region:
	              id = 2942
	        start_va = 0x7ffc41f90000
	          end_va = 0x7ffc41fecfff
	       monitored = 0
	     entry_point = 0x7ffc41fbe510
	     region_type = mapped_file
	            name = "usocore.dll"
	        filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll")

Region:
	              id = 2943
	        start_va = 0x7ffc43990000
	          end_va = 0x7ffc439cefff
	       monitored = 0
	     entry_point = 0x7ffc439b82d0
	     region_type = mapped_file
	            name = "tcpipcfg.dll"
	        filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll")

Region:
	              id = 2944
	        start_va = 0x7ffc439d0000
	          end_va = 0x7ffc439e6fff
	       monitored = 0
	     entry_point = 0x7ffc439d7520
	     region_type = mapped_file
	            name = "usoapi.dll"
	        filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll")

Region:
	              id = 2945
	        start_va = 0x7ffc44d20000
	          end_va = 0x7ffc44d30fff
	       monitored = 0
	     entry_point = 0x7ffc44d228d0
	     region_type = mapped_file
	            name = "credentialmigrationhandler.dll"
	        filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll")

Region:
	              id = 2946
	        start_va = 0x7ffc45d30000
	          end_va = 0x7ffc45d47fff
	       monitored = 0
	     entry_point = 0x7ffc45d3b850
	     region_type = mapped_file
	            name = "dmcmnutils.dll"
	        filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll")

Region:
	              id = 2947
	        start_va = 0x7ffc45d50000
	          end_va = 0x7ffc45d81fff
	       monitored = 0
	     entry_point = 0x7ffc45d5b0c0
	     region_type = mapped_file
	            name = "shacct.dll"
	        filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll")

Region:
	              id = 2948
	        start_va = 0x7ffc45db0000
	          end_va = 0x7ffc45dc7fff
	       monitored = 0
	     entry_point = 0x7ffc45db1b10
	     region_type = mapped_file
	            name = "locationframeworkinternalps.dll"
	        filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll")

Region:
	              id = 2949
	        start_va = 0x7ffc45dd0000
	          end_va = 0x7ffc45edefff
	       monitored = 0
	     entry_point = 0x7ffc45e0c010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 2950
	        start_va = 0x7ffc45ee0000
	          end_va = 0x7ffc45efcfff
	       monitored = 0
	     entry_point = 0x7ffc45ee4f60
	     region_type = mapped_file
	            name = "appinfo.dll"
	        filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll")

Region:
	              id = 2951
	        start_va = 0x7ffc46010000
	          end_va = 0x7ffc46055fff
	       monitored = 0
	     entry_point = 0x7ffc460179a0
	     region_type = mapped_file
	            name = "adsldp.dll"
	        filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll")

Region:
	              id = 2952
	        start_va = 0x7ffc47160000
	          end_va = 0x7ffc47167fff
	       monitored = 0
	     entry_point = 0x7ffc471613b0
	     region_type = mapped_file
	            name = "dmiso8601utils.dll"
	        filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll")

Region:
	              id = 2953
	        start_va = 0x7ffc471c0000
	          end_va = 0x7ffc472dcfff
	       monitored = 0
	     entry_point = 0x7ffc471efe60
	     region_type = mapped_file
	            name = "qmgr.dll"
	        filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll")

Region:
	              id = 2954
	        start_va = 0x7ffc49c60000
	          end_va = 0x7ffc49cc6fff
	       monitored = 0
	     entry_point = 0x7ffc49c6b160
	     region_type = mapped_file
	            name = "upnp.dll"
	        filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll")

Region:
	              id = 2955
	        start_va = 0x7ffc49cd0000
	          end_va = 0x7ffc49ce3fff
	       monitored = 0
	     entry_point = 0x7ffc49cd2a00
	     region_type = mapped_file
	            name = "bitsigd.dll"
	        filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll")

Region:
	              id = 2956
	        start_va = 0x7ffc4a5c0000
	          end_va = 0x7ffc4a5defff
	       monitored = 0
	     entry_point = 0x7ffc4a5c4960
	     region_type = mapped_file
	            name = "ncprov.dll"
	        filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll")

Region:
	              id = 2957
	        start_va = 0x7ffc4bc90000
	          end_va = 0x7ffc4bcc5fff
	       monitored = 0
	     entry_point = 0x7ffc4bc927f0
	     region_type = mapped_file
	            name = "windows.networking.hostname.dll"
	        filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll")

Region:
	              id = 2958
	        start_va = 0x7ffc4bd50000
	          end_va = 0x7ffc4bd63fff
	       monitored = 0
	     entry_point = 0x7ffc4bd53710
	     region_type = mapped_file
	            name = "mskeyprotect.dll"
	        filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll")

Region:
	              id = 2959
	        start_va = 0x7ffc4bd70000
	          end_va = 0x7ffc4bd97fff
	       monitored = 0
	     entry_point = 0x7ffc4bd7efc0
	     region_type = mapped_file
	            name = "dssenh.dll"
	        filename = "\\Windows\\System32\\dssenh.dll" (normalized: "c:\\windows\\system32\\dssenh.dll")

Region:
	              id = 2960
	        start_va = 0x7ffc4be00000
	          end_va = 0x7ffc4be1dfff
	       monitored = 0
	     entry_point = 0x7ffc4be0ef80
	     region_type = mapped_file
	            name = "ncryptsslp.dll"
	        filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll")

Region:
	              id = 2961
	        start_va = 0x7ffc4be20000
	          end_va = 0x7ffc4be35fff
	       monitored = 0
	     entry_point = 0x7ffc4be21af0
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll")

Region:
	              id = 2962
	        start_va = 0x7ffc4be40000
	          end_va = 0x7ffc4be59fff
	       monitored = 0
	     entry_point = 0x7ffc4be42330
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll")

Region:
	              id = 2963
	        start_va = 0x7ffc4be60000
	          end_va = 0x7ffc4be6cfff
	       monitored = 0
	     entry_point = 0x7ffc4be61420
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll")

Region:
	              id = 2964
	        start_va = 0x7ffc4c140000
	          end_va = 0x7ffc4c1c3fff
	       monitored = 0
	     entry_point = 0x7ffc4c158d50
	     region_type = mapped_file
	            name = "wbemess.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll")

Region:
	              id = 2965
	        start_va = 0x7ffc4c1d0000
	          end_va = 0x7ffc4c1e5fff
	       monitored = 0
	     entry_point = 0x7ffc4c1d55e0
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 2966
	        start_va = 0x7ffc4c1f0000
	          end_va = 0x7ffc4c2c5fff
	       monitored = 0
	     entry_point = 0x7ffc4c21a800
	     region_type = mapped_file
	            name = "wmiprvsd.dll"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll")

Region:
	              id = 2967
	        start_va = 0x7ffc4c2d0000
	          end_va = 0x7ffc4c333fff
	       monitored = 0
	     entry_point = 0x7ffc4c2ebed0
	     region_type = mapped_file
	            name = "repdrvfs.dll"
	        filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll")

Region:
	              id = 2968
	        start_va = 0x7ffc4c340000
	          end_va = 0x7ffc4c364fff
	       monitored = 0
	     entry_point = 0x7ffc4c349900
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 2969
	        start_va = 0x7ffc4c370000
	          end_va = 0x7ffc4c383fff
	       monitored = 0
	     entry_point = 0x7ffc4c371800
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2970
	        start_va = 0x7ffc4c390000
	          end_va = 0x7ffc4c485fff
	       monitored = 0
	     entry_point = 0x7ffc4c3c9590
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2971
	        start_va = 0x7ffc4c490000
	          end_va = 0x7ffc4c503fff
	       monitored = 0
	     entry_point = 0x7ffc4c4a5eb0
	     region_type = mapped_file
	            name = "esscli.dll"
	        filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll")

Region:
	              id = 2972
	        start_va = 0x7ffc4c510000
	          end_va = 0x7ffc4c646fff
	       monitored = 0
	     entry_point = 0x7ffc4c550480
	     region_type = mapped_file
	            name = "wbemcore.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll")

Region:
	              id = 2973
	        start_va = 0x7ffc4c650000
	          end_va = 0x7ffc4c65efff
	       monitored = 0
	     entry_point = 0x7ffc4c654960
	     region_type = mapped_file
	            name = "nci.dll"
	        filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll")

Region:
	              id = 2974
	        start_va = 0x7ffc4c680000
	          end_va = 0x7ffc4c8f9fff
	       monitored = 0
	     entry_point = 0x7ffc4c69a7a0
	     region_type = mapped_file
	            name = "msxml6.dll"
	        filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll")

Region:
	              id = 2975
	        start_va = 0x7ffc4c9c0000
	          end_va = 0x7ffc4c9cffff
	       monitored = 0
	     entry_point = 0x7ffc4c9c1690
	     region_type = mapped_file
	            name = "wups.dll"
	        filename = "\\Windows\\System32\\wups.dll" (normalized: "c:\\windows\\system32\\wups.dll")

Region:
	              id = 2976
	        start_va = 0x7ffc4cc10000
	          end_va = 0x7ffc4cc20fff
	       monitored = 0
	     entry_point = 0x7ffc4cc17480
	     region_type = mapped_file
	            name = "tetheringclient.dll"
	        filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll")

Region:
	              id = 2977
	        start_va = 0x7ffc4dbb0000
	          end_va = 0x7ffc4dbc0fff
	       monitored = 0
	     entry_point = 0x7ffc4dbb2fc0
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2978
	        start_va = 0x7ffc4dbd0000
	          end_va = 0x7ffc4dbedfff
	       monitored = 0
	     entry_point = 0x7ffc4dbd3a40
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll")

Region:
	              id = 2979
	        start_va = 0x7ffc4dbf0000
	          end_va = 0x7ffc4dc71fff
	       monitored = 0
	     entry_point = 0x7ffc4dbf2a10
	     region_type = mapped_file
	            name = "hnetcfg.dll"
	        filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll")

Region:
	              id = 2980
	        start_va = 0x7ffc4dca0000
	          end_va = 0x7ffc4dcb1fff
	       monitored = 0
	     entry_point = 0x7ffc4dca1a80
	     region_type = mapped_file
	            name = "bitsproxy.dll"
	        filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll")

Region:
	              id = 2981
	        start_va = 0x7ffc4dcd0000
	          end_va = 0x7ffc4dd0ffff
	       monitored = 0
	     entry_point = 0x7ffc4dcdcbe0
	     region_type = mapped_file
	            name = "adsldpc.dll"
	        filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll")

Region:
	              id = 2982
	        start_va = 0x7ffc4dd10000
	          end_va = 0x7ffc4dd56fff
	       monitored = 0
	     entry_point = 0x7ffc4dd11d10
	     region_type = mapped_file
	            name = "activeds.dll"
	        filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll")

Region:
	              id = 2983
	        start_va = 0x7ffc4dd60000
	          end_va = 0x7ffc4dda1fff
	       monitored = 0
	     entry_point = 0x7ffc4dd63670
	     region_type = mapped_file
	            name = "wdscore.dll"
	        filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll")

Region:
	              id = 2984
	        start_va = 0x7ffc4ddd0000
	          end_va = 0x7ffc4ddf1fff
	       monitored = 0
	     entry_point = 0x7ffc4dde2540
	     region_type = mapped_file
	            name = "updatepolicy.dll"
	        filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll")

Region:
	              id = 2985
	        start_va = 0x7ffc4de00000
	          end_va = 0x7ffc4ded4fff
	       monitored = 0
	     entry_point = 0x7ffc4de1cf80
	     region_type = mapped_file
	            name = "wuapi.dll"
	        filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll")

Region:
	              id = 2986
	        start_va = 0x7ffc4dfc0000
	          end_va = 0x7ffc4dffffff
	       monitored = 0
	     entry_point = 0x7ffc4dfd6c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 2987
	        start_va = 0x7ffc4e070000
	          end_va = 0x7ffc4e08efff
	       monitored = 0
	     entry_point = 0x7ffc4e0737e0
	     region_type = mapped_file
	            name = "netsetupapi.dll"
	        filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll")

Region:
	              id = 2988
	        start_va = 0x7ffc4e090000
	          end_va = 0x7ffc4e108fff
	       monitored = 0
	     entry_point = 0x7ffc4e0976a0
	     region_type = mapped_file
	            name = "netsetupshim.dll"
	        filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll")

Region:
	              id = 2989
	        start_va = 0x7ffc4e2f0000
	          end_va = 0x7ffc4e305fff
	       monitored = 0
	     entry_point = 0x7ffc4e2f1d50
	     region_type = mapped_file
	            name = "wwapi.dll"
	        filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll")

Region:
	              id = 2990
	        start_va = 0x7ffc4e310000
	          end_va = 0x7ffc4e327fff
	       monitored = 0
	     entry_point = 0x7ffc4e314e10
	     region_type = mapped_file
	            name = "adhsvc.dll"
	        filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll")

Region:
	              id = 2991
	        start_va = 0x7ffc4e330000
	          end_va = 0x7ffc4e354fff
	       monitored = 0
	     entry_point = 0x7ffc4e335ca0
	     region_type = mapped_file
	            name = "httpprxm.dll"
	        filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll")

Region:
	              id = 2992
	        start_va = 0x7ffc4e3c0000
	          end_va = 0x7ffc4e400fff
	       monitored = 0
	     entry_point = 0x7ffc4e3c3750
	     region_type = mapped_file
	            name = "sqmapi.dll"
	        filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll")

Region:
	              id = 2993
	        start_va = 0x7ffc4e410000
	          end_va = 0x7ffc4e502fff
	       monitored = 0
	     entry_point = 0x7ffc4e435d80
	     region_type = mapped_file
	            name = "iphlpsvc.dll"
	        filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll")

Region:
	              id = 2994
	        start_va = 0x7ffc4e510000
	          end_va = 0x7ffc4e527fff
	       monitored = 0
	     entry_point = 0x7ffc4e512000
	     region_type = mapped_file
	            name = "vsstrace.dll"
	        filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll")

Region:
	              id = 2995
	        start_va = 0x7ffc4e530000
	          end_va = 0x7ffc4e6b1fff
	       monitored = 0
	     entry_point = 0x7ffc4e5482a0
	     region_type = mapped_file
	            name = "vssapi.dll"
	        filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll")

Region:
	              id = 2996
	        start_va = 0x7ffc4eca0000
	          end_va = 0x7ffc4ed42fff
	       monitored = 0
	     entry_point = 0x7ffc4eca2c10
	     region_type = mapped_file
	            name = "clusapi.dll"
	        filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll")

Region:
	              id = 2997
	        start_va = 0x7ffc4ed50000
	          end_va = 0x7ffc4eda1fff
	       monitored = 0
	     entry_point = 0x7ffc4ed55770
	     region_type = mapped_file
	            name = "resutils.dll"
	        filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll")

Region:
	              id = 2998
	        start_va = 0x7ffc4edb0000
	          end_va = 0x7ffc4edddfff
	       monitored = 1
	     entry_point = 0x7ffc4edb2300
	     region_type = mapped_file
	            name = "wmidcom.dll"
	        filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll")

Region:
	              id = 2999
	        start_va = 0x7ffc4ede0000
	          end_va = 0x7ffc4ee3dfff
	       monitored = 0
	     entry_point = 0x7ffc4ede5080
	     region_type = mapped_file
	            name = "miutils.dll"
	        filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll")

Region:
	              id = 3000
	        start_va = 0x7ffc4ee40000
	          end_va = 0x7ffc4ee5ffff
	       monitored = 0
	     entry_point = 0x7ffc4ee41f50
	     region_type = mapped_file
	            name = "mi.dll"
	        filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll")

Region:
	              id = 3001
	        start_va = 0x7ffc4ee60000
	          end_va = 0x7ffc4ee68fff
	       monitored = 0
	     entry_point = 0x7ffc4ee618f0
	     region_type = mapped_file
	            name = "sscoreext.dll"
	        filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll")

Region:
	              id = 3002
	        start_va = 0x7ffc4ee70000
	          end_va = 0x7ffc4ee80fff
	       monitored = 0
	     entry_point = 0x7ffc4ee71d30
	     region_type = mapped_file
	            name = "sscore.dll"
	        filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll")

Region:
	              id = 3003
	        start_va = 0x7ffc4ee90000
	          end_va = 0x7ffc4ef0efff
	       monitored = 0
	     entry_point = 0x7ffc4eea7110
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 3004
	        start_va = 0x7ffc4ef10000
	          end_va = 0x7ffc4ef4bfff
	       monitored = 0
	     entry_point = 0x7ffc4ef16aa0
	     region_type = mapped_file
	            name = "wmisvc.dll"
	        filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll")

Region:
	              id = 3005
	        start_va = 0x7ffc4f0d0000
	          end_va = 0x7ffc4f11bfff
	       monitored = 0
	     entry_point = 0x7ffc4f0e5310
	     region_type = mapped_file
	            name = "srvsvc.dll"
	        filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll")

Region:
	              id = 3006
	        start_va = 0x7ffc4f220000
	          end_va = 0x7ffc4f22bfff
	       monitored = 0
	     entry_point = 0x7ffc4f2235c0
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 3007
	        start_va = 0x7ffc505f0000
	          end_va = 0x7ffc505f8fff
	       monitored = 0
	     entry_point = 0x7ffc505f21d0
	     region_type = mapped_file
	            name = "httpprxc.dll"
	        filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll")

Region:
	              id = 3008
	        start_va = 0x7ffc50660000
	          end_va = 0x7ffc50694fff
	       monitored = 0
	     entry_point = 0x7ffc5066a270
	     region_type = mapped_file
	            name = "fwpolicyiomgr.dll"
	        filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll")

Region:
	              id = 3009
	        start_va = 0x7ffc51300000
	          end_va = 0x7ffc51309fff
	       monitored = 0
	     entry_point = 0x7ffc51301350
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 3010
	        start_va = 0x7ffc516a0000
	          end_va = 0x7ffc516b1fff
	       monitored = 0
	     entry_point = 0x7ffc516a3580
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 3011
	        start_va = 0x7ffc538e0000
	          end_va = 0x7ffc538e9fff
	       monitored = 0
	     entry_point = 0x7ffc538e14c0
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 3012
	        start_va = 0x7ffc53d70000
	          end_va = 0x7ffc53d7ffff
	       monitored = 0
	     entry_point = 0x7ffc53d71700
	     region_type = mapped_file
	            name = "proximityservicepal.dll"
	        filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll")

Region:
	              id = 3013
	        start_va = 0x7ffc53d80000
	          end_va = 0x7ffc53d88fff
	       monitored = 0
	     entry_point = 0x7ffc53d81ed0
	     region_type = mapped_file
	            name = "proximitycommonpal.dll"
	        filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll")

Region:
	              id = 3014
	        start_va = 0x7ffc53d90000
	          end_va = 0x7ffc53dbcfff
	       monitored = 0
	     entry_point = 0x7ffc53d92290
	     region_type = mapped_file
	            name = "proximitycommon.dll"
	        filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll")

Region:
	              id = 3015
	        start_va = 0x7ffc53dc0000
	          end_va = 0x7ffc53e11fff
	       monitored = 0
	     entry_point = 0x7ffc53dc38e0
	     region_type = mapped_file
	            name = "proximityservice.dll"
	        filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll")

Region:
	              id = 3016
	        start_va = 0x7ffc54080000
	          end_va = 0x7ffc540fffff
	       monitored = 0
	     entry_point = 0x7ffc540ad280
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 3017
	        start_va = 0x7ffc54160000
	          end_va = 0x7ffc54174fff
	       monitored = 0
	     entry_point = 0x7ffc54162dc0
	     region_type = mapped_file
	            name = "ondemandconnroutehelper.dll"
	        filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll")

Region:
	              id = 3018
	        start_va = 0x7ffc541c0000
	          end_va = 0x7ffc541cdfff
	       monitored = 0
	     entry_point = 0x7ffc541c1460
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 3019
	        start_va = 0x7ffc541d0000
	          end_va = 0x7ffc541eafff
	       monitored = 0
	     entry_point = 0x7ffc541d1040
	     region_type = mapped_file
	            name = "mpr.dll"
	        filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll")

Region:
	              id = 3020
	        start_va = 0x7ffc54510000
	          end_va = 0x7ffc545a9fff
	       monitored = 0
	     entry_point = 0x7ffc5452ada0
	     region_type = mapped_file
	            name = "shsvcs.dll"
	        filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll")

Region:
	              id = 3021
	        start_va = 0x7ffc54680000
	          end_va = 0x7ffc546e6fff
	       monitored = 0
	     entry_point = 0x7ffc546863e0
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 3022
	        start_va = 0x7ffc54740000
	          end_va = 0x7ffc54754fff
	       monitored = 0
	     entry_point = 0x7ffc54743460
	     region_type = mapped_file
	            name = "ssdpapi.dll"
	        filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll")

Region:
	              id = 3023
	        start_va = 0x7ffc54830000
	          end_va = 0x7ffc548effff
	       monitored = 0
	     entry_point = 0x7ffc5485fd20
	     region_type = mapped_file
	            name = "fveapi.dll"
	        filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll")

Region:
	              id = 3024
	        start_va = 0x7ffc54b20000
	          end_va = 0x7ffc54b39fff
	       monitored = 0
	     entry_point = 0x7ffc54b22430
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 3025
	        start_va = 0x7ffc54b40000
	          end_va = 0x7ffc54b53fff
	       monitored = 0
	     entry_point = 0x7ffc54b42d50
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 3026
	        start_va = 0x7ffc54b60000
	          end_va = 0x7ffc54b6afff
	       monitored = 0
	     entry_point = 0x7ffc54b61de0
	     region_type = mapped_file
	            name = "bitsperf.dll"
	        filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll")

Region:
	              id = 3027
	        start_va = 0x7ffc54ed0000
	          end_va = 0x7ffc54f62fff
	       monitored = 0
	     entry_point = 0x7ffc54ed9680
	     region_type = mapped_file
	            name = "msvcp_win.dll"
	        filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll")

Region:
	              id = 3028
	        start_va = 0x7ffc55190000
	          end_va = 0x7ffc551a5fff
	       monitored = 0
	     entry_point = 0x7ffc551919f0
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 3029
	        start_va = 0x7ffc55360000
	          end_va = 0x7ffc55378fff
	       monitored = 0
	     entry_point = 0x7ffc55364520
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 3030
	        start_va = 0x7ffc55820000
	          end_va = 0x7ffc55857fff
	       monitored = 0
	     entry_point = 0x7ffc55838cc0
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 3031
	        start_va = 0x7ffc55860000
	          end_va = 0x7ffc5586afff
	       monitored = 0
	     entry_point = 0x7ffc55861d30
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 3032
	        start_va = 0x7ffc55c60000
	          end_va = 0x7ffc55fe1fff
	       monitored = 0
	     entry_point = 0x7ffc55cb1220
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")

Region:
	              id = 3033
	        start_va = 0x7ffc570e0000
	          end_va = 0x7ffc571edfff
	       monitored = 0
	     entry_point = 0x7ffc5712eaa0
	     region_type = mapped_file
	            name = "mrmcorer.dll"
	        filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll")

Region:
	              id = 3034
	        start_va = 0x7ffc574f0000
	          end_va = 0x7ffc57506fff
	       monitored = 0
	     entry_point = 0x7ffc574f5630
	     region_type = mapped_file
	            name = "sens.dll"
	        filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll")

Region:
	              id = 3035
	        start_va = 0x7ffc57570000
	          end_va = 0x7ffc57582fff
	       monitored = 0
	     entry_point = 0x7ffc575757f0
	     region_type = mapped_file
	            name = "themeservice.dll"
	        filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll")

Region:
	              id = 3036
	        start_va = 0x7ffc57590000
	          end_va = 0x7ffc57609fff
	       monitored = 0
	     entry_point = 0x7ffc575b7630
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 3037
	        start_va = 0x7ffc57620000
	          end_va = 0x7ffc5764dfff
	       monitored = 0
	     entry_point = 0x7ffc57627550
	     region_type = mapped_file
	            name = "netjoin.dll"
	        filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll")

Region:
	              id = 3038
	        start_va = 0x7ffc57650000
	          end_va = 0x7ffc57665fff
	       monitored = 0
	     entry_point = 0x7ffc57651b60
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 3039
	        start_va = 0x7ffc57670000
	          end_va = 0x7ffc576d3fff
	       monitored = 0
	     entry_point = 0x7ffc57685ae0
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 3040
	        start_va = 0x7ffc578a0000
	          end_va = 0x7ffc5794dfff
	       monitored = 0
	     entry_point = 0x7ffc578b80c0
	     region_type = mapped_file
	            name = "windows.networking.connectivity.dll"
	        filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll")

Region:
	              id = 3041
	        start_va = 0x7ffc57950000
	          end_va = 0x7ffc57961fff
	       monitored = 0
	     entry_point = 0x7ffc57959260
	     region_type = mapped_file
	            name = "rilproxy.dll"
	        filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll")

Region:
	              id = 3042
	        start_va = 0x7ffc57970000
	          end_va = 0x7ffc57a20fff
	       monitored = 0
	     entry_point = 0x7ffc579e88b0
	     region_type = mapped_file
	            name = "cellularapi.dll"
	        filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll")

Region:
	              id = 3043
	        start_va = 0x7ffc57a30000
	          end_va = 0x7ffc57a54fff
	       monitored = 0
	     entry_point = 0x7ffc57a42f20
	     region_type = mapped_file
	            name = "wificonnapi.dll"
	        filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll")

Region:
	              id = 3044
	        start_va = 0x7ffc57a60000
	          end_va = 0x7ffc57a70fff
	       monitored = 0
	     entry_point = 0x7ffc57a67ea0
	     region_type = mapped_file
	            name = "dcpapi.dll"
	        filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll")

Region:
	              id = 3045
	        start_va = 0x7ffc57a80000
	          end_va = 0x7ffc57a99fff
	       monitored = 0
	     entry_point = 0x7ffc57a82cf0
	     region_type = mapped_file
	            name = "locationpelegacywinlocation.dll"
	        filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll")

Region:
	              id = 3046
	        start_va = 0x7ffc57aa0000
	          end_va = 0x7ffc57af4fff
	       monitored = 0
	     entry_point = 0x7ffc57aa3fb0
	     region_type = mapped_file
	            name = "policymanager.dll"
	        filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll")

Region:
	              id = 3047
	        start_va = 0x7ffc57b00000
	          end_va = 0x7ffc57b36fff
	       monitored = 0
	     entry_point = 0x7ffc57b06020
	     region_type = mapped_file
	            name = "gnssadapter.dll"
	        filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll")

Region:
	              id = 3048
	        start_va = 0x7ffc57b40000
	          end_va = 0x7ffc57b5ffff
	       monitored = 0
	     entry_point = 0x7ffc57b439a0
	     region_type = mapped_file
	            name = "locationwinpalmisc.dll"
	        filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll")

Region:
	              id = 3049
	        start_va = 0x7ffc57b60000
	          end_va = 0x7ffc57ba0fff
	       monitored = 0
	     entry_point = 0x7ffc57b64840
	     region_type = mapped_file
	            name = "usermgrproxy.dll"
	        filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll")

Region:
	              id = 3050
	        start_va = 0x7ffc57bb0000
	          end_va = 0x7ffc57ce5fff
	       monitored = 0
	     entry_point = 0x7ffc57bdf350
	     region_type = mapped_file
	            name = "wintypes.dll"
	        filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll")

Region:
	              id = 3051
	        start_va = 0x7ffc57cf0000
	          end_va = 0x7ffc57dd5fff
	       monitored = 0
	     entry_point = 0x7ffc57d0cf10
	     region_type = mapped_file
	            name = "usermgr.dll"
	        filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll")

Region:
	              id = 3052
	        start_va = 0x7ffc57de0000
	          end_va = 0x7ffc57debfff
	       monitored = 0
	     entry_point = 0x7ffc57de14d0
	     region_type = mapped_file
	            name = "locationframeworkps.dll"
	        filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll")

Region:
	              id = 3053
	        start_va = 0x7ffc57df0000
	          end_va = 0x7ffc57dfbfff
	       monitored = 0
	     entry_point = 0x7ffc57df2830
	     region_type = mapped_file
	            name = "bi.dll"
	        filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll")

Region:
	              id = 3054
	        start_va = 0x7ffc57e00000
	          end_va = 0x7ffc57e3dfff
	       monitored = 0
	     entry_point = 0x7ffc57e0a050
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 3055
	        start_va = 0x7ffc57e40000
	          end_va = 0x7ffc57e66fff
	       monitored = 0
	     entry_point = 0x7ffc57e43bf0
	     region_type = mapped_file
	            name = "profsvcext.dll"
	        filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll")

Region:
	              id = 3056
	        start_va = 0x7ffc57e70000
	          end_va = 0x7ffc57f37fff
	       monitored = 0
	     entry_point = 0x7ffc57eb13f0
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 3057
	        start_va = 0x7ffc57f40000
	          end_va = 0x7ffc57fa0fff
	       monitored = 0
	     entry_point = 0x7ffc57f44b50
	     region_type = mapped_file
	            name = "wlanapi.dll"
	        filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll")

Region:
	              id = 3058
	        start_va = 0x7ffc57fb0000
	          end_va = 0x7ffc5812bfff
	       monitored = 0
	     entry_point = 0x7ffc58001650
	     region_type = mapped_file
	            name = "locationframework.dll"
	        filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll")

Region:
	              id = 3059
	        start_va = 0x7ffc58130000
	          end_va = 0x7ffc5813afff
	       monitored = 0
	     entry_point = 0x7ffc58131770
	     region_type = mapped_file
	            name = "lfsvc.dll"
	        filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll")

Region:
	              id = 3060
	        start_va = 0x7ffc58140000
	          end_va = 0x7ffc58194fff
	       monitored = 0
	     entry_point = 0x7ffc5814fc00
	     region_type = mapped_file
	            name = "profsvc.dll"
	        filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll")

Region:
	              id = 3061
	        start_va = 0x7ffc58230000
	          end_va = 0x7ffc582c1fff
	       monitored = 0
	     entry_point = 0x7ffc5827a780
	     region_type = mapped_file
	            name = "msvcp110_win.dll"
	        filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll")

Region:
	              id = 3062
	        start_va = 0x7ffc58350000
	          end_va = 0x7ffc5835cfff
	       monitored = 0
	     entry_point = 0x7ffc58352ca0
	     region_type = mapped_file
	            name = "csystemeventsbrokerclient.dll"
	        filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll")

Region:
	              id = 3063
	        start_va = 0x7ffc58b50000
	          end_va = 0x7ffc58b7efff
	       monitored = 0
	     entry_point = 0x7ffc58b58910
	     region_type = mapped_file
	            name = "wptaskscheduler.dll"
	        filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll")

Region:
	              id = 3064
	        start_va = 0x7ffc58b80000
	          end_va = 0x7ffc58b8ffff
	       monitored = 0
	     entry_point = 0x7ffc58b82c60
	     region_type = mapped_file
	            name = "usermgrcli.dll"
	        filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll")

Region:
	              id = 3065
	        start_va = 0x7ffc58c20000
	          end_va = 0x7ffc58c55fff
	       monitored = 0
	     entry_point = 0x7ffc58c30070
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 3066
	        start_va = 0x7ffc58cd0000
	          end_va = 0x7ffc58d3dfff
	       monitored = 0
	     entry_point = 0x7ffc58cd7f60
	     region_type = mapped_file
	            name = "taskcomp.dll"
	        filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll")

Region:
	              id = 3067
	        start_va = 0x7ffc58d40000
	          end_va = 0x7ffc58d50fff
	       monitored = 0
	     entry_point = 0x7ffc58d43320
	     region_type = mapped_file
	            name = "wmiclnt.dll"
	        filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll")

Region:
	              id = 3068
	        start_va = 0x7ffc58d60000
	          end_va = 0x7ffc58da0fff
	       monitored = 0
	     entry_point = 0x7ffc58d77eb0
	     region_type = mapped_file
	            name = "ubpm.dll"
	        filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll")

Region:
	              id = 3069
	        start_va = 0x7ffc58db0000
	          end_va = 0x7ffc58eabfff
	       monitored = 0
	     entry_point = 0x7ffc58de6df0
	     region_type = mapped_file
	            name = "schedsvc.dll"
	        filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll")

Region:
	              id = 3070
	        start_va = 0x7ffc58eb0000
	          end_va = 0x7ffc58f6efff
	       monitored = 0
	     entry_point = 0x7ffc58ed1c50
	     region_type = mapped_file
	            name = "taskschd.dll"
	        filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll")

Region:
	              id = 3071
	        start_va = 0x7ffc58fc0000
	          end_va = 0x7ffc58fc9fff
	       monitored = 0
	     entry_point = 0x7ffc58fc1660
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 3072
	        start_va = 0x7ffc58fd0000
	          end_va = 0x7ffc58fe7fff
	       monitored = 0
	     entry_point = 0x7ffc58fd5910
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 3073
	        start_va = 0x7ffc58ff0000
	          end_va = 0x7ffc5913cfff
	       monitored = 0
	     entry_point = 0x7ffc59033da0
	     region_type = mapped_file
	            name = "gpsvc.dll"
	        filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll")

Region:
	              id = 3074
	        start_va = 0x7ffc59500000
	          end_va = 0x7ffc59992fff
	       monitored = 0
	     entry_point = 0x7ffc5950f760
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll")

Region:
	              id = 3075
	        start_va = 0x7ffc599a0000
	          end_va = 0x7ffc59a06fff
	       monitored = 0
	     entry_point = 0x7ffc599be710
	     region_type = mapped_file
	            name = "bcp47langs.dll"
	        filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll")

Region:
	              id = 3076
	        start_va = 0x7ffc5a2c0000
	          end_va = 0x7ffc5a2d2fff
	       monitored = 0
	     entry_point = 0x7ffc5a2c2760
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 3077
	        start_va = 0x7ffc5a2e0000
	          end_va = 0x7ffc5a358fff
	       monitored = 0
	     entry_point = 0x7ffc5a2ffb90
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")

Region:
	              id = 3078
	        start_va = 0x7ffc5a360000
	          end_va = 0x7ffc5a367fff
	       monitored = 0
	     entry_point = 0x7ffc5a3613e0
	     region_type = mapped_file
	            name = "dabapi.dll"
	        filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll")

Region:
	              id = 3079
	        start_va = 0x7ffc5a3a0000
	          end_va = 0x7ffc5a525fff
	       monitored = 0
	     entry_point = 0x7ffc5a3ed700
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 3080
	        start_va = 0x7ffc5a530000
	          end_va = 0x7ffc5a54bfff
	       monitored = 0
	     entry_point = 0x7ffc5a5337a0
	     region_type = mapped_file
	            name = "samlib.dll"
	        filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll")

Region:
	              id = 3081
	        start_va = 0x7ffc5a6e0000
	          end_va = 0x7ffc5a71ffff
	       monitored = 0
	     entry_point = 0x7ffc5a6f1960
	     region_type = mapped_file
	            name = "brokerlib.dll"
	        filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll")

Region:
	              id = 3082
	        start_va = 0x7ffc5a850000
	          end_va = 0x7ffc5a876fff
	       monitored = 0
	     entry_point = 0x7ffc5a857940
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 3083
	        start_va = 0x7ffc5a8a0000
	          end_va = 0x7ffc5a949fff
	       monitored = 0
	     entry_point = 0x7ffc5a8c7910
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 3084
	        start_va = 0x7ffc5a950000
	          end_va = 0x7ffc5aa4ffff
	       monitored = 0
	     entry_point = 0x7ffc5a990f80
	     region_type = mapped_file
	            name = "twinapi.appcore.dll"
	        filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll")

Region:
	              id = 3085
	        start_va = 0x7ffc5aae0000
	          end_va = 0x7ffc5aaebfff
	       monitored = 0
	     entry_point = 0x7ffc5aae2480
	     region_type = mapped_file
	            name = "sysntfy.dll"
	        filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll")

Region:
	              id = 3086
	        start_va = 0x7ffc5abb0000
	          end_va = 0x7ffc5abe1fff
	       monitored = 0
	     entry_point = 0x7ffc5abc2340
	     region_type = mapped_file
	            name = "fwbase.dll"
	        filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll")

Region:
	              id = 3087
	        start_va = 0x7ffc5ae20000
	          end_va = 0x7ffc5ae2bfff
	       monitored = 0
	     entry_point = 0x7ffc5ae22790
	     region_type = mapped_file
	            name = "hid.dll"
	        filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll")

Region:
	              id = 3088
	        start_va = 0x7ffc5ae30000
	          end_va = 0x7ffc5ae53fff
	       monitored = 0
	     entry_point = 0x7ffc5ae33260
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 3089
	        start_va = 0x7ffc5afd0000
	          end_va = 0x7ffc5b0c3fff
	       monitored = 0
	     entry_point = 0x7ffc5afda960
	     region_type = mapped_file
	            name = "ucrtbase.dll"
	        filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")

Region:
	              id = 3090
	        start_va = 0x7ffc5b120000
	          end_va = 0x7ffc5b168fff
	       monitored = 0
	     entry_point = 0x7ffc5b12a090
	     region_type = mapped_file
	            name = "authz.dll"
	        filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll")

Region:
	              id = 3091
	        start_va = 0x7ffc5b240000
	          end_va = 0x7ffc5b24bfff
	       monitored = 0
	     entry_point = 0x7ffc5b2427e0
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 3092
	        start_va = 0x7ffc5b320000
	          end_va = 0x7ffc5b350fff
	       monitored = 0
	     entry_point = 0x7ffc5b327d10
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 3093
	        start_va = 0x7ffc5b380000
	          end_va = 0x7ffc5b3f9fff
	       monitored = 0
	     entry_point = 0x7ffc5b3a1a50
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 3094
	        start_va = 0x7ffc5b440000
	          end_va = 0x7ffc5b473fff
	       monitored = 0
	     entry_point = 0x7ffc5b45ae70
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 3095
	        start_va = 0x7ffc5b480000
	          end_va = 0x7ffc5b489fff
	       monitored = 0
	     entry_point = 0x7ffc5b481830
	     region_type = mapped_file
	            name = "dpapi.dll"
	        filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll")

Region:
	              id = 3096
	        start_va = 0x7ffc5b590000
	          end_va = 0x7ffc5b5aefff
	       monitored = 0
	     entry_point = 0x7ffc5b595d30
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 3097
	        start_va = 0x7ffc5b700000
	          end_va = 0x7ffc5b75bfff
	       monitored = 0
	     entry_point = 0x7ffc5b716f70
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 3098
	        start_va = 0x7ffc5b7b0000
	          end_va = 0x7ffc5b7c6fff
	       monitored = 0
	     entry_point = 0x7ffc5b7b79d0
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 3099
	        start_va = 0x7ffc5b8d0000
	          end_va = 0x7ffc5b8dafff
	       monitored = 0
	     entry_point = 0x7ffc5b8d19a0
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 3100
	        start_va = 0x7ffc5b910000
	          end_va = 0x7ffc5b930fff
	       monitored = 0
	     entry_point = 0x7ffc5b920250
	     region_type = mapped_file
	            name = "joinutil.dll"
	        filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll")

Region:
	              id = 3101
	        start_va = 0x7ffc5b960000
	          end_va = 0x7ffc5b999fff
	       monitored = 0
	     entry_point = 0x7ffc5b968d20
	     region_type = mapped_file
	            name = "ntasn1.dll"
	        filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll")

Region:
	              id = 3102
	        start_va = 0x7ffc5b9a0000
	          end_va = 0x7ffc5b9c6fff
	       monitored = 0
	     entry_point = 0x7ffc5b9b0aa0
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll")

Region:
	              id = 3103
	        start_va = 0x7ffc5bab0000
	          end_va = 0x7ffc5badcfff
	       monitored = 0
	     entry_point = 0x7ffc5bac9d40
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 3104
	        start_va = 0x7ffc5bc40000
	          end_va = 0x7ffc5bc95fff
	       monitored = 0
	     entry_point = 0x7ffc5bc50bf0
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 3105
	        start_va = 0x7ffc5bca0000
	          end_va = 0x7ffc5bcb8fff
	       monitored = 0
	     entry_point = 0x7ffc5bca5e10
	     region_type = mapped_file
	            name = "eventaggregation.dll"
	        filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll")

Region:
	              id = 3106
	        start_va = 0x7ffc5bcc0000
	          end_va = 0x7ffc5bce8fff
	       monitored = 0
	     entry_point = 0x7ffc5bcd4530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 3107
	        start_va = 0x7ffc5bcf0000
	          end_va = 0x7ffc5bd88fff
	       monitored = 0
	     entry_point = 0x7ffc5bd1f4e0
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 3108
	        start_va = 0x7ffc5be30000
	          end_va = 0x7ffc5be43fff
	       monitored = 0
	     entry_point = 0x7ffc5be352e0
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 3109
	        start_va = 0x7ffc5be50000
	          end_va = 0x7ffc5be5efff
	       monitored = 0
	     entry_point = 0x7ffc5be53210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 3110
	        start_va = 0x7ffc5be60000
	          end_va = 0x7ffc5be6ffff
	       monitored = 0
	     entry_point = 0x7ffc5be656e0
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 3111
	        start_va = 0x7ffc5be70000
	          end_va = 0x7ffc5bebafff
	       monitored = 0
	     entry_point = 0x7ffc5be735f0
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 3112
	        start_va = 0x7ffc5bec0000
	          end_va = 0x7ffc5bf02fff
	       monitored = 0
	     entry_point = 0x7ffc5bed4b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 3113
	        start_va = 0x7ffc5bf10000
	          end_va = 0x7ffc5bf95fff
	       monitored = 0
	     entry_point = 0x7ffc5bf1d8f0
	     region_type = mapped_file
	            name = "firewallapi.dll"
	        filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll")

Region:
	              id = 3114
	        start_va = 0x7ffc5bfa0000
	          end_va = 0x7ffc5c187fff
	       monitored = 0
	     entry_point = 0x7ffc5bfcba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 3115
	        start_va = 0x7ffc5c190000
	          end_va = 0x7ffc5c356fff
	       monitored = 0
	     entry_point = 0x7ffc5c1edb80
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 3116
	        start_va = 0x7ffc5c360000
	          end_va = 0x7ffc5c3b4fff
	       monitored = 0
	     entry_point = 0x7ffc5c377970
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 3117
	        start_va = 0x7ffc5c3c0000
	          end_va = 0x7ffc5ca03fff
	       monitored = 0
	     entry_point = 0x7ffc5c5864b0
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll")

Region:
	              id = 3118
	        start_va = 0x7ffc5cac0000
	          end_va = 0x7ffc5cb29fff
	       monitored = 0
	     entry_point = 0x7ffc5caf6d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 3119
	        start_va = 0x7ffc5cb30000
	          end_va = 0x7ffc5cb46fff
	       monitored = 0
	     entry_point = 0x7ffc5cb31390
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 3120
	        start_va = 0x7ffc5cb50000
	          end_va = 0x7ffc5cc04fff
	       monitored = 0
	     entry_point = 0x7ffc5cb922e0
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll")

Region:
	              id = 3121
	        start_va = 0x7ffc5cc10000
	          end_va = 0x7ffc5cc6bfff
	       monitored = 0
	     entry_point = 0x7ffc5cc2b720
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 3122
	        start_va = 0x7ffc5cc80000
	          end_va = 0x7ffc5e1defff
	       monitored = 0
	     entry_point = 0x7ffc5cde11f0
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 3123
	        start_va = 0x7ffc5e1e0000
	          end_va = 0x7ffc5e2a0fff
	       monitored = 0
	     entry_point = 0x7ffc5e200da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 3124
	        start_va = 0x7ffc5e2b0000
	          end_va = 0x7ffc5e3cbfff
	       monitored = 0
	     entry_point = 0x7ffc5e2f02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 3125
	        start_va = 0x7ffc5e3e0000
	          end_va = 0x7ffc5e522fff
	       monitored = 0
	     entry_point = 0x7ffc5e408210
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 3126
	        start_va = 0x7ffc5e740000
	          end_va = 0x7ffc5e7aafff
	       monitored = 0
	     entry_point = 0x7ffc5e7590c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 3127
	        start_va = 0x7ffc5e7b0000
	          end_va = 0x7ffc5e801fff
	       monitored = 0
	     entry_point = 0x7ffc5e7bf530
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 3128
	        start_va = 0x7ffc5e850000
	          end_va = 0x7ffc5e8ecfff
	       monitored = 0
	     entry_point = 0x7ffc5e8578a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 3129
	        start_va = 0x7ffc5e8f0000
	          end_va = 0x7ffc5e94afff
	       monitored = 0
	     entry_point = 0x7ffc5e9038b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 3130
	        start_va = 0x7ffc5e950000
	          end_va = 0x7ffc5e957fff
	       monitored = 0
	     entry_point = 0x7ffc5e951ea0
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 3131
	        start_va = 0x7ffc5e960000
	          end_va = 0x7ffc5eab5fff
	       monitored = 0
	     entry_point = 0x7ffc5e96a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 3132
	        start_va = 0x7ffc5ec20000
	          end_va = 0x7ffc5ecc6fff
	       monitored = 0
	     entry_point = 0x7ffc5ec358d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 3133
	        start_va = 0x7ffc5ecd0000
	          end_va = 0x7ffc5ed7cfff
	       monitored = 0
	     entry_point = 0x7ffc5ece81a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 3134
	        start_va = 0x7ffc5ee90000
	          end_va = 0x7ffc5f2b8fff
	       monitored = 0
	     entry_point = 0x7ffc5eeb8740
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 3135
	        start_va = 0x7ffc5f2c0000
	          end_va = 0x7ffc5f53cfff
	       monitored = 0
	     entry_point = 0x7ffc5f394970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 3136
	        start_va = 0x7ffc5f540000
	          end_va = 0x7ffc5f6c5fff
	       monitored = 0
	     entry_point = 0x7ffc5f58ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 3137
	        start_va = 0x7ffc5f760000
	          end_va = 0x7ffc5f806fff
	       monitored = 0
	     entry_point = 0x7ffc5f76b4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 3138
	        start_va = 0x7ffc5f810000
	          end_va = 0x7ffc5f9d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 3141
	        start_va = 0x72e0000
	          end_va = 0x73dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000072e0000"
	        filename = ""

Region:
	              id = 3142
	        start_va = 0x73e0000
	          end_va = 0x74dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000073e0000"
	        filename = ""

Region:
	              id = 3143
	        start_va = 0x74e0000
	          end_va = 0x75dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000074e0000"
	        filename = ""

Region:
	              id = 3144
	        start_va = 0x75e0000
	          end_va = 0x76dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000075e0000"
	        filename = ""

Region:
	              id = 3231
	        start_va = 0x530000
	          end_va = 0x534fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3585
	        start_va = 0x530000
	          end_va = 0x532fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3610
	        start_va = 0x530000
	          end_va = 0x537fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3612
	        start_va = 0x530000
	          end_va = 0x535fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3613
	        start_va = 0x530000
	          end_va = 0x535fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3680
	        start_va = 0x76e0000
	          end_va = 0x77dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000076e0000"
	        filename = ""

Region:
	              id = 3686
	        start_va = 0x530000
	          end_va = 0x532fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3688
	        start_va = 0x530000
	          end_va = 0x532fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3698
	        start_va = 0x530000
	          end_va = 0x532fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3737
	        start_va = 0x6e0000
	          end_va = 0x6e1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006e0000"
	        filename = ""

Region:
	              id = 3738
	        start_va = 0x530000
	          end_va = 0x530fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3739
	        start_va = 0x7930000
	          end_va = 0x7a2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007930000"
	        filename = ""

Region:
	              id = 3740
	        start_va = 0x7a30000
	          end_va = 0x7b2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007a30000"
	        filename = ""

Region:
	              id = 3741
	        start_va = 0x530000
	          end_va = 0x530fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000530000"
	        filename = ""

Region:
	              id = 3742
	        start_va = 0x7b30000
	          end_va = 0x7c2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007b30000"
	        filename = ""

Region:
	              id = 3743
	        start_va = 0x7c30000
	          end_va = 0x7d2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007c30000"
	        filename = ""

Region:
	              id = 3744
	        start_va = 0x7d30000
	          end_va = 0x7e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007d30000"
	        filename = ""


Thread:
	id = 29
	os_tid = 0xd50


Thread:
	id = 30
	os_tid = 0x848


Thread:
	id = 31
	os_tid = 0x12a0


Thread:
	id = 32
	os_tid = 0x1298


Thread:
	id = 33
	os_tid = 0x1260


Thread:
	id = 34
	os_tid = 0x11e8


Thread:
	id = 35
	os_tid = 0x1068


Thread:
	id = 36
	os_tid = 0x5b4


Thread:
	id = 37
	os_tid = 0x514


Thread:
	id = 38
	os_tid = 0xd64


Thread:
	id = 39
	os_tid = 0xd70


Thread:
	id = 40
	os_tid = 0xd74


Thread:
	id = 41
	os_tid = 0xa30


Thread:
	id = 42
	os_tid = 0xdf0


Thread:
	id = 43
	os_tid = 0xa48


Thread:
	id = 44
	os_tid = 0x934


Thread:
	id = 45
	os_tid = 0xbe8


Thread:
	id = 46
	os_tid = 0x308


Thread:
	id = 47
	os_tid = 0x618


Thread:
	id = 48
	os_tid = 0xcec


Thread:
	id = 49
	os_tid = 0x300


Thread:
	id = 50
	os_tid = 0x444


Thread:
	id = 51
	os_tid = 0x5e8


Thread:
	id = 52
	os_tid = 0xc44


Thread:
	id = 53
	os_tid = 0xc30


Thread:
	id = 54
	os_tid = 0xc24


Thread:
	id = 55
	os_tid = 0xfdc


Thread:
	id = 56
	os_tid = 0xfc8


Thread:
	id = 57
	os_tid = 0xfc4


Thread:
	id = 58
	os_tid = 0xfbc


Thread:
	id = 59
	os_tid = 0xfb8


Thread:
	id = 60
	os_tid = 0xf78


Thread:
	id = 61
	os_tid = 0xf24


Thread:
	id = 62
	os_tid = 0xc64


Thread:
	id = 63
	os_tid = 0xb4c


Thread:
	id = 64
	os_tid = 0x9fc


Thread:
	id = 65
	os_tid = 0x9b4


Thread:
	id = 66
	os_tid = 0x9ac


Thread:
	id = 67
	os_tid = 0x9a4


Thread:
	id = 68
	os_tid = 0x950


Thread:
	id = 69
	os_tid = 0x94c


Thread:
	id = 70
	os_tid = 0x948


Thread:
	id = 71
	os_tid = 0x928


Thread:
	id = 72
	os_tid = 0x8f8


Thread:
	id = 73
	os_tid = 0x8c4


Thread:
	id = 74
	os_tid = 0x8b0


Thread:
	id = 75
	os_tid = 0x894


Thread:
	id = 76
	os_tid = 0x888


Thread:
	id = 77
	os_tid = 0x86c


Thread:
	id = 78
	os_tid = 0x840


Thread:
	id = 79
	os_tid = 0x4f4


Thread:
	id = 80
	os_tid = 0x464


Thread:
	id = 81
	os_tid = 0x4d0


Thread:
	id = 82
	os_tid = 0x420


Thread:
	id = 83
	os_tid = 0x7c0


Thread:
	id = 84
	os_tid = 0x608


Thread:
	id = 85
	os_tid = 0x4f8


Thread:
	id = 86
	os_tid = 0x49c


Thread:
	id = 87
	os_tid = 0x2ac


Thread:
	id = 88
	os_tid = 0x1b4


Thread:
	id = 89
	os_tid = 0x1b8


Thread:
	id = 90
	os_tid = 0x1cc


Thread:
	id = 91
	os_tid = 0x16c


Thread:
	id = 92
	os_tid = 0x190


Thread:
	id = 93
	os_tid = 0x3fc


Thread:
	id = 94
	os_tid = 0x3f4


Thread:
	id = 95
	os_tid = 0x3e8


Thread:
	id = 96
	os_tid = 0x3e4


Thread:
	id = 97
	os_tid = 0x3d0


Thread:
	id = 98
	os_tid = 0x3cc


Thread:
	id = 99
	os_tid = 0x348


Thread:
	id = 116
	os_tid = 0xd48


Thread:
	id = 117
	os_tid = 0xaf0


Thread:
	id = 118
	os_tid = 0x6a4


Thread:
	id = 119
	os_tid = 0xbf4


Thread:
	id = 121
	os_tid = 0x118c


Thread:
	id = 122
	os_tid = 0x13b0


Thread:
	id = 123
	os_tid = 0xd68


Thread:
	id = 124
	os_tid = 0xfd8


Thread:
	id = 125
	os_tid = 0x680


Thread:
	id = 126
	os_tid = 0x5c4


Process:
	id = "7"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x5480d000"
	os_pid = "0x36c"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "6"
	os_parent_pid = "0x274"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xe], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xe], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a36c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 3615
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 3616
	        start_va = 0x20000
	          end_va = 0x26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 3617
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 3618
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 3619
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 3620
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 3621
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 3622
	        start_va = 0x100000
	          end_va = 0x1bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 3623
	        start_va = 0x1c0000
	          end_va = 0x1c6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 3624
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 3625
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 3626
	        start_va = 0x1f0000
	          end_va = 0x1f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 3627
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 3628
	        start_va = 0x400000
	          end_va = 0x400fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 3629
	        start_va = 0x410000
	          end_va = 0x414fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 3630
	        start_va = 0x420000
	          end_va = 0x420fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 3631
	        start_va = 0x430000
	          end_va = 0x430fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000430000"
	        filename = ""

Region:
	              id = 3632
	        start_va = 0x440000
	          end_va = 0x440fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000440000"
	        filename = ""

Region:
	              id = 3633
	        start_va = 0x460000
	          end_va = 0x55ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000460000"
	        filename = ""

Region:
	              id = 3634
	        start_va = 0x5e0000
	          end_va = 0x69ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005e0000"
	        filename = ""

Region:
	              id = 3635
	        start_va = 0x6e0000
	          end_va = 0x6effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006e0000"
	        filename = ""

Region:
	              id = 3636
	        start_va = 0x6f0000
	          end_va = 0xa26fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 3637
	        start_va = 0xa30000
	          end_va = 0xbb7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a30000"
	        filename = ""

Region:
	              id = 3638
	        start_va = 0xbc0000
	          end_va = 0xd40fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000bc0000"
	        filename = ""

Region:
	              id = 3639
	        start_va = 0xd50000
	          end_va = 0xdcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d50000"
	        filename = ""

Region:
	              id = 3640
	        start_va = 0xdd0000
	          end_va = 0xecffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000dd0000"
	        filename = ""

Region:
	              id = 3641
	        start_va = 0xed0000
	          end_va = 0xf4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ed0000"
	        filename = ""

Region:
	              id = 3642
	        start_va = 0xf50000
	          end_va = 0xfcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f50000"
	        filename = ""

Region:
	              id = 3643
	        start_va = 0xfd0000
	          end_va = 0x104ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000fd0000"
	        filename = ""

Region:
	              id = 3644
	        start_va = 0x1050000
	          end_va = 0x10cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001050000"
	        filename = ""

Region:
	              id = 3645
	        start_va = 0x10d0000
	          end_va = 0x114ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010d0000"
	        filename = ""

Region:
	              id = 3646
	        start_va = 0x1150000
	          end_va = 0x11cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001150000"
	        filename = ""

Region:
	              id = 3647
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 3648
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 3649
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 3650
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 3651
	        start_va = 0x7ff681dc0000
	          end_va = 0x7ff681e3ffff
	       monitored = 0
	     entry_point = 0x7ff681dd5f50
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 3652
	        start_va = 0x7ffc41e30000
	          end_va = 0x7ffc41e7cfff
	       monitored = 0
	     entry_point = 0x7ffc41e3b470
	     region_type = mapped_file
	            name = "pdh.dll"
	        filename = "\\Windows\\System32\\pdh.dll" (normalized: "c:\\windows\\system32\\pdh.dll")

Region:
	              id = 3653
	        start_va = 0x7ffc43b90000
	          end_va = 0x7ffc43bccfff
	       monitored = 0
	     entry_point = 0x7ffc43b9b760
	     region_type = mapped_file
	            name = "wmiprov.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll")

Region:
	              id = 3654
	        start_va = 0x7ffc43c90000
	          end_va = 0x7ffc43cb4fff
	       monitored = 0
	     entry_point = 0x7ffc43ca5dc0
	     region_type = mapped_file
	            name = "wmiperfclass.dll"
	        filename = "\\Windows\\System32\\wbem\\WmiPerfClass.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiperfclass.dll")

Region:
	              id = 3655
	        start_va = 0x7ffc4c1d0000
	          end_va = 0x7ffc4c1e5fff
	       monitored = 0
	     entry_point = 0x7ffc4c1d55e0
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 3656
	        start_va = 0x7ffc4c340000
	          end_va = 0x7ffc4c364fff
	       monitored = 0
	     entry_point = 0x7ffc4c349900
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 3657
	        start_va = 0x7ffc4c370000
	          end_va = 0x7ffc4c383fff
	       monitored = 0
	     entry_point = 0x7ffc4c371800
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 3658
	        start_va = 0x7ffc4c390000
	          end_va = 0x7ffc4c485fff
	       monitored = 0
	     entry_point = 0x7ffc4c3c9590
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 3659
	        start_va = 0x7ffc4dbb0000
	          end_va = 0x7ffc4dbc0fff
	       monitored = 0
	     entry_point = 0x7ffc4dbb2fc0
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 3660
	        start_va = 0x7ffc4ee90000
	          end_va = 0x7ffc4ef0efff
	       monitored = 0
	     entry_point = 0x7ffc4eea7110
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 3661
	        start_va = 0x7ffc57670000
	          end_va = 0x7ffc576d3fff
	       monitored = 0
	     entry_point = 0x7ffc57685ae0
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 3662
	        start_va = 0x7ffc58d40000
	          end_va = 0x7ffc58d50fff
	       monitored = 0
	     entry_point = 0x7ffc58d43320
	     region_type = mapped_file
	            name = "wmiclnt.dll"
	        filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll")

Region:
	              id = 3663
	        start_va = 0x7ffc5b320000
	          end_va = 0x7ffc5b350fff
	       monitored = 0
	     entry_point = 0x7ffc5b327d10
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 3664
	        start_va = 0x7ffc5bcc0000
	          end_va = 0x7ffc5bce8fff
	       monitored = 0
	     entry_point = 0x7ffc5bcd4530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 3665
	        start_va = 0x7ffc5be50000
	          end_va = 0x7ffc5be5efff
	       monitored = 0
	     entry_point = 0x7ffc5be53210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 3666
	        start_va = 0x7ffc5bfa0000
	          end_va = 0x7ffc5c187fff
	       monitored = 0
	     entry_point = 0x7ffc5bfcba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 3667
	        start_va = 0x7ffc5cac0000
	          end_va = 0x7ffc5cb29fff
	       monitored = 0
	     entry_point = 0x7ffc5caf6d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 3668
	        start_va = 0x7ffc5e1e0000
	          end_va = 0x7ffc5e2a0fff
	       monitored = 0
	     entry_point = 0x7ffc5e200da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 3669
	        start_va = 0x7ffc5e2b0000
	          end_va = 0x7ffc5e3cbfff
	       monitored = 0
	     entry_point = 0x7ffc5e2f02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 3670
	        start_va = 0x7ffc5e740000
	          end_va = 0x7ffc5e7aafff
	       monitored = 0
	     entry_point = 0x7ffc5e7590c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 3671
	        start_va = 0x7ffc5e850000
	          end_va = 0x7ffc5e8ecfff
	       monitored = 0
	     entry_point = 0x7ffc5e8578a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 3672
	        start_va = 0x7ffc5e8f0000
	          end_va = 0x7ffc5e94afff
	       monitored = 0
	     entry_point = 0x7ffc5e9038b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 3673
	        start_va = 0x7ffc5e960000
	          end_va = 0x7ffc5eab5fff
	       monitored = 0
	     entry_point = 0x7ffc5e96a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 3674
	        start_va = 0x7ffc5ec20000
	          end_va = 0x7ffc5ecc6fff
	       monitored = 0
	     entry_point = 0x7ffc5ec358d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 3675
	        start_va = 0x7ffc5ecd0000
	          end_va = 0x7ffc5ed7cfff
	       monitored = 0
	     entry_point = 0x7ffc5ece81a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 3676
	        start_va = 0x7ffc5f2c0000
	          end_va = 0x7ffc5f53cfff
	       monitored = 0
	     entry_point = 0x7ffc5f394970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 3677
	        start_va = 0x7ffc5f540000
	          end_va = 0x7ffc5f6c5fff
	       monitored = 0
	     entry_point = 0x7ffc5f58ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 3678
	        start_va = 0x7ffc5f760000
	          end_va = 0x7ffc5f806fff
	       monitored = 0
	     entry_point = 0x7ffc5f76b4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 3679
	        start_va = 0x7ffc5f810000
	          end_va = 0x7ffc5f9d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")


Thread:
	id = 100
	os_tid = 0xe38


Thread:
	id = 101
	os_tid = 0xdd4


Thread:
	id = 102
	os_tid = 0x5a4


Thread:
	id = 103
	os_tid = 0x45c


Thread:
	id = 104
	os_tid = 0x3b4


Thread:
	id = 105
	os_tid = 0x388


Thread:
	id = 106
	os_tid = 0x17c


Thread:
	id = 107
	os_tid = 0x2e8


Process:
	id = "8"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x1a212000"
	os_pid = "0xd78"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "6"
	os_parent_pid = "0x274"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00033fa1" [0xc000000f]

Region:
	              id = 3145
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 3146
	        start_va = 0x20000
	          end_va = 0x26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 3147
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 3148
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 3149
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 3150
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 3151
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 3152
	        start_va = 0x100000
	          end_va = 0x1bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 3153
	        start_va = 0x1c0000
	          end_va = 0x1c6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 3154
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 3155
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 3156
	        start_va = 0x1f0000
	          end_va = 0x1f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 3157
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 3158
	        start_va = 0x410000
	          end_va = 0x412fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "security.dll"
	        filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll")

Region:
	              id = 3159
	        start_va = 0x480000
	          end_va = 0x480fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000480000"
	        filename = ""

Region:
	              id = 3160
	        start_va = 0x490000
	          end_va = 0x494fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 3161
	        start_va = 0x4a0000
	          end_va = 0x4a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004a0000"
	        filename = ""

Region:
	              id = 3162
	        start_va = 0x4b0000
	          end_va = 0x4b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004b0000"
	        filename = ""

Region:
	              id = 3163
	        start_va = 0x4c0000
	          end_va = 0x5bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004c0000"
	        filename = ""

Region:
	              id = 3164
	        start_va = 0x5c0000
	          end_va = 0x67ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005c0000"
	        filename = ""

Region:
	              id = 3165
	        start_va = 0x680000
	          end_va = 0x680fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000680000"
	        filename = ""

Region:
	              id = 3166
	        start_va = 0x690000
	          end_va = 0x69ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000690000"
	        filename = ""

Region:
	              id = 3167
	        start_va = 0x6a0000
	          end_va = 0x9d6fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 3168
	        start_va = 0x9e0000
	          end_va = 0xb67fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009e0000"
	        filename = ""

Region:
	              id = 3169
	        start_va = 0xb70000
	          end_va = 0xcf0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b70000"
	        filename = ""

Region:
	              id = 3170
	        start_va = 0xd80000
	          end_va = 0xe7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d80000"
	        filename = ""

Region:
	              id = 3171
	        start_va = 0xe80000
	          end_va = 0xefffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e80000"
	        filename = ""

Region:
	              id = 3172
	        start_va = 0x1000000
	          end_va = 0x107ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001000000"
	        filename = ""

Region:
	              id = 3173
	        start_va = 0x1100000
	          end_va = 0x117ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001100000"
	        filename = ""

Region:
	              id = 3174
	        start_va = 0x1180000
	          end_va = 0x1182fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "cimwin32.dll.mui"
	        filename = "\\Windows\\System32\\wbem\\en-US\\cimwin32.dll.mui" (normalized: "c:\\windows\\system32\\wbem\\en-us\\cimwin32.dll.mui")

Region:
	              id = 3175
	        start_va = 0x1190000
	          end_va = 0x120ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001190000"
	        filename = ""

Region:
	              id = 3176
	        start_va = 0x1210000
	          end_va = 0x128ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 3177
	        start_va = 0x1310000
	          end_va = 0x138ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001310000"
	        filename = ""

Region:
	              id = 3178
	        start_va = 0x1390000
	          end_va = 0x148ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001390000"
	        filename = ""

Region:
	              id = 3179
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 3180
	        start_va = 0x180000000
	          end_va = 0x180002fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "wmi.dll"
	        filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll")

Region:
	              id = 3181
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 3182
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 3183
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 3184
	        start_va = 0x7ff681dc0000
	          end_va = 0x7ff681e3ffff
	       monitored = 0
	     entry_point = 0x7ff681dd5f50
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 3185
	        start_va = 0x7ffc41f20000
	          end_va = 0x7ffc41f33fff
	       monitored = 0
	     entry_point = 0x7ffc41f21310
	     region_type = mapped_file
	            name = "browcli.dll"
	        filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll")

Region:
	              id = 3186
	        start_va = 0x7ffc45230000
	          end_va = 0x7ffc4527dfff
	       monitored = 0
	     entry_point = 0x7ffc45241ce0
	     region_type = mapped_file
	            name = "framedynos.dll"
	        filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll")

Region:
	              id = 3187
	        start_va = 0x7ffc45280000
	          end_va = 0x7ffc4544efff
	       monitored = 0
	     entry_point = 0x7ffc452a7df0
	     region_type = mapped_file
	            name = "cimwin32.dll"
	        filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll")

Region:
	              id = 3188
	        start_va = 0x7ffc4a570000
	          end_va = 0x7ffc4a57dfff
	       monitored = 0
	     entry_point = 0x7ffc4a571da0
	     region_type = mapped_file
	            name = "winbrand.dll"
	        filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll")

Region:
	              id = 3189
	        start_va = 0x7ffc4c1d0000
	          end_va = 0x7ffc4c1e5fff
	       monitored = 0
	     entry_point = 0x7ffc4c1d55e0
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 3190
	        start_va = 0x7ffc4c340000
	          end_va = 0x7ffc4c364fff
	       monitored = 0
	     entry_point = 0x7ffc4c349900
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 3191
	        start_va = 0x7ffc4c370000
	          end_va = 0x7ffc4c383fff
	       monitored = 0
	     entry_point = 0x7ffc4c371800
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 3192
	        start_va = 0x7ffc4c390000
	          end_va = 0x7ffc4c485fff
	       monitored = 0
	     entry_point = 0x7ffc4c3c9590
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 3193
	        start_va = 0x7ffc4dc90000
	          end_va = 0x7ffc4dc9afff
	       monitored = 0
	     entry_point = 0x7ffc4dc912b0
	     region_type = mapped_file
	            name = "schedcli.dll"
	        filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll")

Region:
	              id = 3194
	        start_va = 0x7ffc4ee90000
	          end_va = 0x7ffc4ef0efff
	       monitored = 0
	     entry_point = 0x7ffc4eea7110
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 3195
	        start_va = 0x7ffc4f220000
	          end_va = 0x7ffc4f22bfff
	       monitored = 0
	     entry_point = 0x7ffc4f2235c0
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 3196
	        start_va = 0x7ffc516a0000
	          end_va = 0x7ffc516b1fff
	       monitored = 0
	     entry_point = 0x7ffc516a3580
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 3197
	        start_va = 0x7ffc516c0000
	          end_va = 0x7ffc516e5fff
	       monitored = 0
	     entry_point = 0x7ffc516c1cf0
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 3198
	        start_va = 0x7ffc55360000
	          end_va = 0x7ffc55378fff
	       monitored = 0
	     entry_point = 0x7ffc55364520
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 3199
	        start_va = 0x7ffc57650000
	          end_va = 0x7ffc57665fff
	       monitored = 0
	     entry_point = 0x7ffc57651b60
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 3200
	        start_va = 0x7ffc57e00000
	          end_va = 0x7ffc57e3dfff
	       monitored = 0
	     entry_point = 0x7ffc57e0a050
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 3201
	        start_va = 0x7ffc58d40000
	          end_va = 0x7ffc58d50fff
	       monitored = 0
	     entry_point = 0x7ffc58d43320
	     region_type = mapped_file
	            name = "wmiclnt.dll"
	        filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll")

Region:
	              id = 3202
	        start_va = 0x7ffc58fc0000
	          end_va = 0x7ffc58fc9fff
	       monitored = 0
	     entry_point = 0x7ffc58fc1660
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 3203
	        start_va = 0x7ffc5a2c0000
	          end_va = 0x7ffc5a2d2fff
	       monitored = 0
	     entry_point = 0x7ffc5a2c2760
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 3204
	        start_va = 0x7ffc5a850000
	          end_va = 0x7ffc5a876fff
	       monitored = 0
	     entry_point = 0x7ffc5a857940
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 3205
	        start_va = 0x7ffc5b240000
	          end_va = 0x7ffc5b24bfff
	       monitored = 0
	     entry_point = 0x7ffc5b2427e0
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 3206
	        start_va = 0x7ffc5b380000
	          end_va = 0x7ffc5b3f9fff
	       monitored = 0
	     entry_point = 0x7ffc5b3a1a50
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 3207
	        start_va = 0x7ffc5bab0000
	          end_va = 0x7ffc5badcfff
	       monitored = 0
	     entry_point = 0x7ffc5bac9d40
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 3208
	        start_va = 0x7ffc5bc40000
	          end_va = 0x7ffc5bc95fff
	       monitored = 0
	     entry_point = 0x7ffc5bc50bf0
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 3209
	        start_va = 0x7ffc5bcc0000
	          end_va = 0x7ffc5bce8fff
	       monitored = 0
	     entry_point = 0x7ffc5bcd4530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 3210
	        start_va = 0x7ffc5be50000
	          end_va = 0x7ffc5be5efff
	       monitored = 0
	     entry_point = 0x7ffc5be53210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 3211
	        start_va = 0x7ffc5be60000
	          end_va = 0x7ffc5be6ffff
	       monitored = 0
	     entry_point = 0x7ffc5be656e0
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 3212
	        start_va = 0x7ffc5be70000
	          end_va = 0x7ffc5bebafff
	       monitored = 0
	     entry_point = 0x7ffc5be735f0
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 3213
	        start_va = 0x7ffc5bec0000
	          end_va = 0x7ffc5bf02fff
	       monitored = 0
	     entry_point = 0x7ffc5bed4b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 3214
	        start_va = 0x7ffc5bfa0000
	          end_va = 0x7ffc5c187fff
	       monitored = 0
	     entry_point = 0x7ffc5bfcba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 3215
	        start_va = 0x7ffc5c190000
	          end_va = 0x7ffc5c356fff
	       monitored = 0
	     entry_point = 0x7ffc5c1edb80
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 3216
	        start_va = 0x7ffc5cac0000
	          end_va = 0x7ffc5cb29fff
	       monitored = 0
	     entry_point = 0x7ffc5caf6d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 3217
	        start_va = 0x7ffc5cb30000
	          end_va = 0x7ffc5cb46fff
	       monitored = 0
	     entry_point = 0x7ffc5cb31390
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 3218
	        start_va = 0x7ffc5e1e0000
	          end_va = 0x7ffc5e2a0fff
	       monitored = 0
	     entry_point = 0x7ffc5e200da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 3219
	        start_va = 0x7ffc5e2b0000
	          end_va = 0x7ffc5e3cbfff
	       monitored = 0
	     entry_point = 0x7ffc5e2f02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 3220
	        start_va = 0x7ffc5e740000
	          end_va = 0x7ffc5e7aafff
	       monitored = 0
	     entry_point = 0x7ffc5e7590c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 3221
	        start_va = 0x7ffc5e850000
	          end_va = 0x7ffc5e8ecfff
	       monitored = 0
	     entry_point = 0x7ffc5e8578a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 3222
	        start_va = 0x7ffc5e8f0000
	          end_va = 0x7ffc5e94afff
	       monitored = 0
	     entry_point = 0x7ffc5e9038b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 3223
	        start_va = 0x7ffc5e960000
	          end_va = 0x7ffc5eab5fff
	       monitored = 0
	     entry_point = 0x7ffc5e96a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 3224
	        start_va = 0x7ffc5ec20000
	          end_va = 0x7ffc5ecc6fff
	       monitored = 0
	     entry_point = 0x7ffc5ec358d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 3225
	        start_va = 0x7ffc5ecd0000
	          end_va = 0x7ffc5ed7cfff
	       monitored = 0
	     entry_point = 0x7ffc5ece81a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 3226
	        start_va = 0x7ffc5f2c0000
	          end_va = 0x7ffc5f53cfff
	       monitored = 0
	     entry_point = 0x7ffc5f394970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 3227
	        start_va = 0x7ffc5f540000
	          end_va = 0x7ffc5f6c5fff
	       monitored = 0
	     entry_point = 0x7ffc5f58ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 3228
	        start_va = 0x7ffc5f760000
	          end_va = 0x7ffc5f806fff
	       monitored = 0
	     entry_point = 0x7ffc5f76b4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 3229
	        start_va = 0x7ffc5f810000
	          end_va = 0x7ffc5f9d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 3230
	        start_va = 0x1490000
	          end_va = 0x150ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001490000"
	        filename = ""

Region:
	              id = 3232
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 3233
	        start_va = 0xf00000
	          end_va = 0xffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f00000"
	        filename = ""

Region:
	              id = 3234
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 3235
	        start_va = 0x420000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x430420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 3236
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 3237
	        start_va = 0x420000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x430420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 3238
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 3239
	        start_va = 0x420000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x430420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 3240
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 3241
	        start_va = 0x420000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x430420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 3242
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 3243
	        start_va = 0x420000
	          end_va = 0x439fff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 3244
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 3245
	        start_va = 0x420000
	          end_va = 0x439fff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 3246
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 3247
	        start_va = 0x420000
	          end_va = 0x44afff
	       monitored = 0
	     entry_point = 0x43d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 3248
	        start_va = 0x15d0000
	          end_va = 0x19cafff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000015d0000"
	        filename = ""

Region:
	              id = 3249
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 3250
	        start_va = 0x420000
	          end_va = 0x44afff
	       monitored = 0
	     entry_point = 0x43d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 3251
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 3252
	        start_va = 0x420000
	          end_va = 0x44afff
	       monitored = 0
	     entry_point = 0x43d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 3253
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 3254
	        start_va = 0x420000
	          end_va = 0x44afff
	       monitored = 0
	     entry_point = 0x43d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 3255
	        start_va = 0x420000
	          end_va = 0x448fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 3256
	        start_va = 0x19d0000
	          end_va = 0x1ab3fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 3257
	        start_va = 0x420000
	          end_va = 0x448fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 3258
	        start_va = 0x19d0000
	          end_va = 0x1ab3fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 3259
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 3260
	        start_va = 0x1510000
	          end_va = 0x15a2fff
	       monitored = 0
	     entry_point = 0x1589000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 3261
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 3262
	        start_va = 0x1510000
	          end_va = 0x15a2fff
	       monitored = 0
	     entry_point = 0x1589000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 3263
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 3264
	        start_va = 0x1510000
	          end_va = 0x15b0fff
	       monitored = 0
	     entry_point = 0x15a3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 3265
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 3266
	        start_va = 0x1510000
	          end_va = 0x15b0fff
	       monitored = 0
	     entry_point = 0x15a3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 3267
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 3268
	        start_va = 0x1510000
	          end_va = 0x1595fff
	       monitored = 0
	     entry_point = 0x1581000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 3269
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 3270
	        start_va = 0x1510000
	          end_va = 0x1595fff
	       monitored = 0
	     entry_point = 0x1581000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 3271
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 3272
	        start_va = 0x1510000
	          end_va = 0x1595fff
	       monitored = 0
	     entry_point = 0x1581000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 3273
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 3274
	        start_va = 0x1510000
	          end_va = 0x1595fff
	       monitored = 0
	     entry_point = 0x1581000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 3275
	        start_va = 0x400000
	          end_va = 0x40efff
	       monitored = 0
	     entry_point = 0x4036e0
	     region_type = mapped_file
	            name = "dmvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys")

Region:
	              id = 3276
	        start_va = 0x420000
	          end_va = 0x421fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dmvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui")

Region:
	              id = 3277
	        start_va = 0x400000
	          end_va = 0x40efff
	       monitored = 0
	     entry_point = 0x4036e0
	     region_type = mapped_file
	            name = "dmvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys")

Region:
	              id = 3278
	        start_va = 0x420000
	          end_va = 0x421fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dmvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui")

Region:
	              id = 3279
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3280
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3281
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3282
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3283
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3284
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3285
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3286
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3287
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3288
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3289
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3290
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3291
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 3292
	        start_va = 0x19d0000
	          end_va = 0x1adefff
	       monitored = 0
	     entry_point = 0x1a0c010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 3293
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 3294
	        start_va = 0x19d0000
	          end_va = 0x1adefff
	       monitored = 0
	     entry_point = 0x1a0c010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 3295
	        start_va = 0x420000
	          end_va = 0x436fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tcpip.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui")

Region:
	              id = 3296
	        start_va = 0x19d0000
	          end_va = 0x1c26fff
	       monitored = 0
	     entry_point = 0x1bdce10
	     region_type = mapped_file
	            name = "tcpip.sys"
	        filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys")

Region:
	              id = 3297
	        start_va = 0x420000
	          end_va = 0x436fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tcpip.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui")

Region:
	              id = 3298
	        start_va = 0x19d0000
	          end_va = 0x1c26fff
	       monitored = 0
	     entry_point = 0x1bdce10
	     region_type = mapped_file
	            name = "tcpip.sys"
	        filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys")

Region:
	              id = 3299
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3300
	        start_va = 0x19d0000
	          end_va = 0x1ae0fff
	       monitored = 0
	     entry_point = 0x1ac1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3301
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3302
	        start_va = 0x19d0000
	          end_va = 0x1ae0fff
	       monitored = 0
	     entry_point = 0x1ac1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3303
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3304
	        start_va = 0x19d0000
	          end_va = 0x1ae0fff
	       monitored = 0
	     entry_point = 0x1ac1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3305
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3306
	        start_va = 0x19d0000
	          end_va = 0x1ae0fff
	       monitored = 0
	     entry_point = 0x1ac1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3307
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3308
	        start_va = 0x19d0000
	          end_va = 0x1ae0fff
	       monitored = 0
	     entry_point = 0x1ac1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3309
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3310
	        start_va = 0x19d0000
	          end_va = 0x1ae0fff
	       monitored = 0
	     entry_point = 0x1ac1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3311
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 3312
	        start_va = 0x420000
	          end_va = 0x42dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 3313
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 3314
	        start_va = 0x420000
	          end_va = 0x42dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 3315
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3316
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3317
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3318
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3319
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3320
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3321
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3322
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3323
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3324
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3325
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3326
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3327
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3328
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3329
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3330
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3331
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3332
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3333
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3334
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3335
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3336
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3337
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3338
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3339
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3340
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3341
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3342
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3343
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3344
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3345
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3346
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3347
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3348
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3349
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3350
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3351
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3352
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3353
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3354
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3355
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3356
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3357
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3358
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3359
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3360
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3361
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3362
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3363
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3364
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3365
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3366
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3367
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3368
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3369
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3370
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3371
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3372
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3373
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3374
	        start_va = 0x19d0000
	          end_va = 0x1aeffff
	       monitored = 0
	     entry_point = 0x1acc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3375
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3376
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3377
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3378
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3379
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3380
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3381
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3382
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3383
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3384
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3385
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3386
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3387
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3388
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3389
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3390
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3391
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3392
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3393
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3394
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3395
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3396
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3397
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3398
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3399
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3400
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3401
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3402
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3403
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mrxsmb.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui")

Region:
	              id = 3404
	        start_va = 0xd00000
	          end_va = 0xd71fff
	       monitored = 0
	     entry_point = 0xd57000
	     region_type = mapped_file
	            name = "mrxsmb.sys"
	        filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys")

Region:
	              id = 3405
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mrxsmb.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui")

Region:
	              id = 3406
	        start_va = 0xd00000
	          end_va = 0xd71fff
	       monitored = 0
	     entry_point = 0xd57000
	     region_type = mapped_file
	            name = "mrxsmb.sys"
	        filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys")

Region:
	              id = 3407
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 3408
	        start_va = 0x420000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x430420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 3409
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 3410
	        start_va = 0x420000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x430420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 3411
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 3412
	        start_va = 0x420000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x430420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 3413
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 3414
	        start_va = 0x420000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x430420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 3415
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 3416
	        start_va = 0x420000
	          end_va = 0x439fff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 3417
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 3418
	        start_va = 0x420000
	          end_va = 0x439fff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 3419
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 3420
	        start_va = 0x420000
	          end_va = 0x44afff
	       monitored = 0
	     entry_point = 0x43d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 3421
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 3422
	        start_va = 0x420000
	          end_va = 0x44afff
	       monitored = 0
	     entry_point = 0x43d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 3423
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 3424
	        start_va = 0x420000
	          end_va = 0x44afff
	       monitored = 0
	     entry_point = 0x43d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 3425
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 3426
	        start_va = 0x420000
	          end_va = 0x44afff
	       monitored = 0
	     entry_point = 0x43d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 3427
	        start_va = 0x420000
	          end_va = 0x448fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 3428
	        start_va = 0x19d0000
	          end_va = 0x1ab3fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 3429
	        start_va = 0x420000
	          end_va = 0x448fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 3430
	        start_va = 0x19d0000
	          end_va = 0x1ab3fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 3431
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 3432
	        start_va = 0x1510000
	          end_va = 0x15a2fff
	       monitored = 0
	     entry_point = 0x1589000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 3433
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 3434
	        start_va = 0x1510000
	          end_va = 0x15a2fff
	       monitored = 0
	     entry_point = 0x1589000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 3435
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 3436
	        start_va = 0x1510000
	          end_va = 0x15b0fff
	       monitored = 0
	     entry_point = 0x15a3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 3437
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 3438
	        start_va = 0x1510000
	          end_va = 0x15b0fff
	       monitored = 0
	     entry_point = 0x15a3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 3439
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 3440
	        start_va = 0x1510000
	          end_va = 0x1595fff
	       monitored = 0
	     entry_point = 0x1581000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 3441
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 3442
	        start_va = 0x1510000
	          end_va = 0x1595fff
	       monitored = 0
	     entry_point = 0x1581000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 3443
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 3444
	        start_va = 0x1510000
	          end_va = 0x1595fff
	       monitored = 0
	     entry_point = 0x1581000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 3445
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 3446
	        start_va = 0x1510000
	          end_va = 0x1595fff
	       monitored = 0
	     entry_point = 0x1581000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 3447
	        start_va = 0x19d0000
	          end_va = 0x1bcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000019d0000"
	        filename = ""

Region:
	              id = 3448
	        start_va = 0x400000
	          end_va = 0x40efff
	       monitored = 0
	     entry_point = 0x4036e0
	     region_type = mapped_file
	            name = "dmvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys")

Region:
	              id = 3449
	        start_va = 0x420000
	          end_va = 0x421fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dmvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui")

Region:
	              id = 3450
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3451
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3452
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3453
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3454
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3455
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3456
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3457
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3458
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3459
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3460
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3461
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3462
	        start_va = 0x400000
	          end_va = 0x40bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 3463
	        start_va = 0x420000
	          end_va = 0x43afff
	       monitored = 1
	     entry_point = 0x421190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 3464
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 3465
	        start_va = 0x1bd0000
	          end_va = 0x1cdefff
	       monitored = 0
	     entry_point = 0x1c0c010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 3466
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 3467
	        start_va = 0x1bd0000
	          end_va = 0x1cdefff
	       monitored = 0
	     entry_point = 0x1c0c010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 3468
	        start_va = 0x420000
	          end_va = 0x436fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tcpip.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui")

Region:
	              id = 3469
	        start_va = 0x1bd0000
	          end_va = 0x1e26fff
	       monitored = 0
	     entry_point = 0x1ddce10
	     region_type = mapped_file
	            name = "tcpip.sys"
	        filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys")

Region:
	              id = 3470
	        start_va = 0x420000
	          end_va = 0x436fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tcpip.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui")

Region:
	              id = 3471
	        start_va = 0x1bd0000
	          end_va = 0x1e26fff
	       monitored = 0
	     entry_point = 0x1ddce10
	     region_type = mapped_file
	            name = "tcpip.sys"
	        filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys")

Region:
	              id = 3472
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3473
	        start_va = 0x1bd0000
	          end_va = 0x1ce0fff
	       monitored = 0
	     entry_point = 0x1cc1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3474
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3475
	        start_va = 0x1bd0000
	          end_va = 0x1ce0fff
	       monitored = 0
	     entry_point = 0x1cc1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3476
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3477
	        start_va = 0x1bd0000
	          end_va = 0x1ce0fff
	       monitored = 0
	     entry_point = 0x1cc1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3478
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3479
	        start_va = 0x1bd0000
	          end_va = 0x1ce0fff
	       monitored = 0
	     entry_point = 0x1cc1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3480
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3481
	        start_va = 0x1bd0000
	          end_va = 0x1ce0fff
	       monitored = 0
	     entry_point = 0x1cc1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3482
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 3483
	        start_va = 0x1bd0000
	          end_va = 0x1ce0fff
	       monitored = 0
	     entry_point = 0x1cc1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 3484
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 3485
	        start_va = 0x420000
	          end_va = 0x42dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 3486
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 3487
	        start_va = 0x420000
	          end_va = 0x42dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 3488
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 3489
	        start_va = 0x420000
	          end_va = 0x42dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 3490
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3491
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3492
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3493
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3494
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3495
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3496
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3497
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3498
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3499
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3500
	        start_va = 0x420000
	          end_va = 0x431fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 3501
	        start_va = 0x1510000
	          end_va = 0x15befff
	       monitored = 0
	     entry_point = 0x1587000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 3502
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3503
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3504
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3505
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3506
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3507
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3508
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3509
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3510
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3511
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3512
	        start_va = 0x400000
	          end_va = 0x403fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 3513
	        start_va = 0xd00000
	          end_va = 0xd60fff
	       monitored = 0
	     entry_point = 0xd10770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 3514
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3515
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3516
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3517
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3518
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3519
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3520
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3521
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3522
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3523
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3524
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3525
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3526
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3527
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3528
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3529
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3530
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3531
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3532
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3533
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3534
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3535
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3536
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3537
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3538
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3539
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3540
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3541
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3542
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3543
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3544
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3545
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3546
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3547
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3548
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 3549
	        start_va = 0x1bd0000
	          end_va = 0x1ceffff
	       monitored = 0
	     entry_point = 0x1ccc040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 3550
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3551
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3552
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3553
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3554
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3555
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3556
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3557
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3558
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3559
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3560
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3561
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3562
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3563
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3564
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3565
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3566
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3567
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3568
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3569
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3570
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3571
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3572
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3573
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3574
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3575
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3576
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3577
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3578
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 3579
	        start_va = 0x420000
	          end_va = 0x430fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 3580
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mrxsmb.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui")

Region:
	              id = 3581
	        start_va = 0xd00000
	          end_va = 0xd71fff
	       monitored = 0
	     entry_point = 0xd57000
	     region_type = mapped_file
	            name = "mrxsmb.sys"
	        filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys")

Region:
	              id = 3582
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mrxsmb.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui")

Region:
	              id = 3583
	        start_va = 0xd00000
	          end_va = 0xd71fff
	       monitored = 0
	     entry_point = 0xd57000
	     region_type = mapped_file
	            name = "mrxsmb.sys"
	        filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys")

Region:
	              id = 3584
	        start_va = 0x7ffc54a00000
	          end_va = 0x7ffc54a0dfff
	       monitored = 0
	     entry_point = 0x7ffc54a02b10
	     region_type = mapped_file
	            name = "perfos.dll"
	        filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll")

Region:
	              id = 3609
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 3611
	        start_va = 0x410000
	          end_va = 0x417fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 3614
	        start_va = 0x420000
	          end_va = 0x425fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""


Thread:
	id = 108
	os_tid = 0x1380


Thread:
	id = 109
	os_tid = 0xccc


Thread:
	id = 110
	os_tid = 0xfc0


Thread:
	id = 111
	os_tid = 0xd9c


Thread:
	id = 112
	os_tid = 0xd94


Thread:
	id = 113
	os_tid = 0xd90


Thread:
	id = 114
	os_tid = 0xd88


Thread:
	id = 115
	os_tid = 0xd7c


Thread:
	id = 120
	os_tid = 0x1190